Catalog GTFOBins

GTFO · Tool

strace

5 techniques Linux · macOSGTFOBins GPL-3.0

file-write

File WritePrivilege Escalation LinuxmacOS

The data to be written appears amid the syscall log, quoted and with special characters escaped in octal notation. The string representation will be truncated, pick a value big enough instead of `999`. More generally, any binary that executes whatever syscall passing arbitrary data can be used in place of `strace - DATA`.

strace -s 999 -o /path/to/output-file strace - DATA
Context
sudo
Native
file-write
MITRE
T1565

file-write

File Write LinuxmacOS

The data to be written appears amid the syscall log, quoted and with special characters escaped in octal notation. The string representation will be truncated, pick a value big enough instead of `999`. More generally, any binary that executes whatever syscall passing arbitrary data can be used in place of `strace - DATA`.

strace -s 999 -o /path/to/output-file strace - DATA
Context
unprivileged
Native
file-write
MITRE
T1565