DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

nmap

12 techniques Linux · macOSGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation LinuxmacOS

The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.

nmap -iL /path/to/input-file
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation LinuxmacOS

The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.

nmap -iL /path/to/input-file
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read LinuxmacOS

The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.

nmap -iL /path/to/input-file
Context
unprivileged
Native
file-read
MITRE
T1005

file-write

File WritePrivilege Escalation LinuxmacOS

The payload appears inside the regular nmap output.

nmap -oG=/path/to/output-file DATA
Context
sudo
Native
file-write
MITRE
T1565

file-write

File WritePrivilege Escalation LinuxmacOS

The payload appears inside the regular nmap output.

nmap -oG=/path/to/output-file DATA
Context
suid
Native
file-write
MITRE
T1565

file-write

File Write LinuxmacOS

The payload appears inside the regular nmap output.

nmap -oG=/path/to/output-file DATA
Context
unprivileged
Native
file-write
MITRE
T1565

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege Escalation LinuxmacOS

This allows to run Lua code (`...`).

echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
Context
sudo
Native
inherit, from:lua

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege Escalation LinuxmacOS

This allows to run Lua code (`...`).

echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
Context
suid
Native
inherit, from:lua

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile Upload LinuxmacOS

This allows to run Lua code (`...`).

echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
Context
unprivileged
Native
inherit, from:lua