GTFO · Tool

vim

12 techniquesLinuxGTFOBinsGPL-3.0

file-read

File ReadPrivilege EscalationLinux

vim -c ':redir! >/path/to/output-file | echo "DATA" | redir END | q'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/vim/

File ReadPrivilege EscalationLinux

vim -c ':redir! >/path/to/output-file | echo "DATA" | redir END | q'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/vim/

File ReadLinux

vim -c ':redir! >/path/to/output-file | echo "DATA" | redir END | q'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/vim/

File DownloadFile ReadFile WriteLibrary LoadReverse/Bind ShellExecutionFile UploadPrivilege EscalationLinux

This allows to run Python code (`...`).

vim -c ':py ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: inherit, from:python
MITRE: T1105 T1005 T1565 T1574 T1059 T1071 T1041
Refs: gtfobins.github.io/gtfobins/vim/

File DownloadFile ReadFile WriteLibrary LoadReverse/Bind ShellExecutionFile UploadPrivilege EscalationLinux

This allows to run Python code (`...`).

vim -c ':py ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: inherit, from:python
MITRE: T1105 T1005 T1565 T1574 T1059 T1071 T1041
Refs: gtfobins.github.io/gtfobins/vim/

File DownloadFile ReadFile WriteLibrary LoadReverse/Bind ShellExecutionFile UploadLinux

This allows to run Python code (`...`).

vim -c ':py ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: inherit, from:python
MITRE: T1105 T1005 T1565 T1574 T1059 T1071 T1041
Refs: gtfobins.github.io/gtfobins/vim/

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

vim -c ':lua ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/vim/

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadPrivilege EscalationLinux

This allows to run Lua code (`...`).

vim -c ':lua ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/vim/

Reverse/Bind ShellFile DownloadFile ReadFile WriteExecutionFile UploadLinux

This allows to run Lua code (`...`).

vim -c ':lua ...'

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: inherit, from:lua
MITRE: T1059 T1071 T1105 T1005 T1565 T1041
Refs: gtfobins.github.io/gtfobins/vim/

File ReadFile WriteExecutionPrivilege EscalationLinux

vim

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: inherit, from:vi
MITRE: T1005 T1565 T1059
Refs: gtfobins.github.io/gtfobins/vim/

File ReadFile WriteExecutionPrivilege EscalationLinux

vim

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: suid
Native: inherit, from:vi
MITRE: T1005 T1565 T1059
Refs: gtfobins.github.io/gtfobins/vim/

File ReadFile WriteExecutionLinux

vim

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: inherit, from:vi
MITRE: T1005 T1565 T1059
Refs: gtfobins.github.io/gtfobins/vim/