https://gtfobins.github.io/ GTFOBins Star logo GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems. The project collects legitimate functions of Unix binaries that can be abused to [DEL:get the f**k:DEL] break out restricted shells, escalate or maintain elevated privileges, transfer files, spawn bind and reverse shells, and facilitate the other post-exploitation tasks. It is important to note that this is not a list of exploits, and the programs listed here are not vulnerable per se, rather, GTFOBins is a compendium about how to live off the land when you only have certain binaries available. GTFOBins is a collaborative project created by Emilio Pinna and Andrea Cardaci where everyone can contribute with additional binaries and techniques. If you are looking for Windows binaries you should visit LOLBAS. * Shell * Command * Reverse shell * Non-interactive reverse shell * Bind shell * Non-interactive bind shell * File upload * File download * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID [ ] Binary Functions * Shell ansible-playbook * Sudo * Shell apt-get * Sudo * Shell apt * Sudo * File read ar * SUID * Sudo * Command aria2c * Sudo * Limited SUID * File write * File read arj * SUID * Sudo * File read arp * SUID * Sudo * File read as * SUID * Sudo * Shell * File write ash * SUID * Sudo * Shell at * Command * Sudo * File read atobm * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write awk * File read * SUID * Sudo * Limited SUID * File read base32 * SUID * Sudo * File read base64 * SUID * Sudo * File read basenc * SUID * Sudo * Shell * Reverse shell * File upload * File download bash * File write * File read * Library load * SUID * Sudo bpftrace * Sudo * File read bridge * SUID * Sudo * Shell bundler * Sudo * Shell busctl * Sudo * Shell * File upload * File write busybox * File read * SUID * Sudo * Shell byebug * Sudo * Limited SUID * File read bzip2 * SUID * Sudo * Shell * File write c89 * File read * Sudo * Shell * File write c99 * File read * Sudo cancel * File upload * Shell capsh * SUID * Sudo * File read cat * SUID * Sudo * Shell certbot * Sudo * Shell check_by_ssh * Sudo * File read check_cups * Sudo * File write check_log * File read * Sudo * File read check_memory * Sudo * File read check_raid * Sudo * Command check_ssl_cert * Sudo * File read check_statusfile * Sudo * SUID chmod * Sudo * SUID chown * Sudo * SUID chroot * Sudo * File read cmp * SUID * Sudo * Shell cobc * Sudo * File read column * SUID * Sudo * File read comm * SUID * Sudo * Shell composer * Sudo * Limited SUID * Shell cowsay * Sudo * Shell cowthink * Sudo * File write * File read cp * SUID * Sudo * Shell * Reverse shell cpan * File upload * File download * Sudo * Shell * File write cpio * File read * SUID * Sudo * Shell cpulimit * SUID * Sudo * Shell crash * Command * Sudo * Command crontab * Sudo * Shell * File write csh * SUID * Sudo * File write * File read csplit * SUID * Sudo * Shell * File write csvtool * File read * SUID * Sudo * File read cupsfilter * SUID * Sudo * File upload * File download * File write curl * File read * SUID * Sudo * File read cut * SUID * Sudo * Shell * File write dash * SUID * Sudo * File read date * SUID * Sudo * File write * File read dd * SUID * Sudo * File read dialog * SUID * Sudo * File read diff * SUID * Sudo * File read dig * SUID * Sudo * Shell dmesg * File read * Sudo dmidecode * Sudo * SUID dmsetup * Sudo dnf * Sudo * Shell * File write docker * File read * SUID * Sudo * File write * File read dosbox * SUID * Sudo * Shell dpkg * Sudo * Shell dvips * Sudo * Limited SUID * Shell * Reverse shell * File upload * File download easy_install * File write * File read * Library load * Sudo * Shell eb * Sudo * Shell * File write * File read ed * SUID * Sudo * Limited SUID * Shell * File write emacs * File read * SUID * Sudo * Shell env * SUID * Sudo * File read eqn * SUID * Sudo * Shell * File write ex * File read * Sudo * File write exiftool * File read * Sudo * File read expand * SUID * Sudo * Shell * File read expect * SUID * Sudo * Shell facter * Sudo * File read file * SUID * Sudo * Shell find * SUID * Sudo * File upload finger * File download * Shell flock * SUID * Sudo * File read fmt * SUID * Sudo * File read fold * SUID * Sudo * Shell * File upload ftp * File download * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write gawk * File read * SUID * Sudo * Limited SUID * Shell * File write gcc * File read * Sudo * File read gcore * SUID * Sudo * Shell * Reverse shell * File upload * File download * File write gdb * File read * Library load * SUID * Sudo * Capabilities * Shell gem * Sudo * File read genisoimage * Sudo * Shell ghc * Sudo * Shell ghci * Sudo * Shell * Reverse shell * File upload * File download gimp * File write * File read * Library load * SUID * Sudo * Shell * File read git * Sudo * Limited SUID * File read grep * SUID * Sudo * Shell * File write gtester * SUID * Sudo * File read gzip * SUID * Sudo * File read hd * SUID * Sudo * File read head * SUID * Sudo * File read hexdump * SUID * Sudo * File read highlight * SUID * Sudo * Shell hping3 * SUID * Sudo * File write * File read iconv * SUID * Sudo * Shell iftop * Sudo * Limited SUID * SUID install * Sudo * Shell ionice * SUID * Sudo * File read ip * SUID * Sudo * Shell * Reverse shell * File upload * File download irb * File write * File read * Library load * Sudo * Shell * Reverse shell * File download jjs * File write * File read * SUID * Sudo * File read join * SUID * Sudo * Shell journalctl * Sudo * File read jq * SUID * Sudo * Shell * Reverse shell * File download jrunscript * File write * File read * SUID * Sudo * Shell knife * Sudo * Shell * Reverse shell * File upload * File download ksh * File write * File read * SUID * Sudo * File read ksshell * SUID * Sudo * Shell * File read latex * Sudo * Limited SUID * Shell ld.so * SUID * Sudo * Sudo ldconfig * Limited SUID * Shell * File write less * File read * SUID * Sudo ln * Sudo * Shell loginctl * Sudo * Shell logsave * SUID * Sudo * File read look * SUID * Sudo * Shell * File write ltrace * File read * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download lua * File write * File read * SUID * Sudo * Limited SUID * Shell lualatex * Sudo * Limited SUID * Shell luatex * Sudo * Limited SUID * File download * File write lwp-download * File read * Sudo * File read lwp-request * Sudo * Shell mail * Sudo * Shell * File write make * SUID * Sudo * Shell man * File read * Sudo * Shell * File write * File read mawk * SUID * Sudo * Limited SUID * Shell * File read more * SUID * Sudo mount * Sudo * File read msgattrib * SUID * Sudo * File read msgcat * SUID * Sudo * File read msgconv * SUID * Sudo * Shell * File read msgfilter * SUID * Sudo * File read msgmerge * SUID * Sudo * File read msguniq * SUID * Sudo * File read mtr * Sudo * SUID mv * Sudo * Shell * Library load mysql * Sudo * Limited SUID * Shell * File write nano * File read * Sudo * Limited SUID * File read nasm * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write nawk * File read * SUID * Sudo * Limited SUID * Reverse shell * Bind shell * File upload nc * File download * Sudo * Limited SUID * File read neofetch * Sudo * Shell nice * SUID * Sudo * File read nl * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download nmap * File write * File read * SUID * Sudo * Limited SUID * Shell * Reverse shell * Bind shell * File upload * File download node * File write * File read * SUID * Sudo * Capabilities * Shell * Command nohup * SUID * Sudo * Shell npm * Sudo * Shell nroff * File read * Sudo * Shell nsenter * Sudo * Shell * File write octave * File read * Sudo * Limited SUID * File read od * SUID * Sudo * Reverse shell * File upload * File download * File write openssl * File read * Library load * SUID * Sudo * Shell * File read openvpn * SUID * Sudo openvt * Sudo * File read paste * SUID * Sudo * Shell pdb * Sudo * Shell * File read pdflatex * Sudo * Limited SUID * Shell pdftex * Sudo * Limited SUID * Shell * Reverse shell * File read perl * SUID * Sudo * Capabilities * Shell * File read pg * SUID * Sudo * Shell * Command * Reverse shell * File upload * File download php * File write * File read * SUID * Sudo * Capabilities * Shell * File read pic * Sudo * Limited SUID * Shell * File write pico * File read * Sudo * Limited SUID * Shell * Reverse shell * File upload * File download pip * File write * File read * Library load * Sudo pkexec * Sudo pkg * Sudo * File read pr * SUID * Sudo * Shell pry * Sudo * Limited SUID * Shell psql * Sudo * Shell * File write puppet * File read * Sudo * Shell * Reverse shell * File upload * File download * File write python * File read * Library load * SUID * Sudo * Capabilities * Shell * File read rake * Sudo * Limited SUID * File read readelf * SUID * Sudo * File write red * File read * Sudo * File read redcarpet * Sudo * File upload restic * SUID * Sudo * File read rev * SUID * Sudo rlogin * File upload * Shell * File write rlwrap * SUID * Sudo * Shell rpm * Sudo * Limited SUID * Shell rpmquery * Sudo * Limited SUID * Shell rsync * SUID * Sudo * Shell * Reverse shell * File upload * File download ruby * File write * File read * Library load * Sudo * Capabilities * Shell * File write run-mailcap * File read * Sudo * Shell run-parts * SUID * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download rview * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download rvim * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell * File upload scp * File download * Sudo * Limited SUID * Shell screen * File write * Sudo * Shell script * File write * Sudo * Shell * Command * File write sed * File read * SUID * Sudo * Shell service * Sudo * Shell setarch * SUID * Sudo * Shell * File upload sftp * File download * Sudo * Shell sg * Sudo * File write * File read shuf * SUID * Sudo * Shell slsh * Sudo * Limited SUID * Shell * File upload smbclient * File download * Sudo snap * Sudo * Shell * Reverse shell * Bind shell socat * File upload * File download * Sudo * Limited SUID * File read soelim * SUID * Sudo * File read sort * SUID * Sudo * Shell * Command split * File write * File read * Sudo * Shell * File write * File read sqlite3 * SUID * Sudo * Limited SUID * File read ss * SUID * Sudo * Library load ssh-keygen * SUID * Sudo * File read ssh-keyscan * SUID * Sudo * Shell * File upload ssh * File download * File read * Sudo * Shell start-stop-daemon * SUID * Sudo * Shell stdbuf * SUID * Sudo * Shell * File write strace * SUID * Sudo * File read strings * SUID * Sudo su * Sudo * File read sysctl * SUID * Sudo * SUID systemctl * Sudo systemd-resolve * Sudo * File read tac * SUID * Sudo * File read tail * SUID * Sudo * Shell * File upload * File download tar * File write * File read * Sudo * Limited SUID * Shell taskset * SUID * Sudo * File read tbl * SUID * Sudo * Shell * Non-interactive reverse shell tclsh * SUID * Sudo * Command tcpdump * Sudo * File write tee * SUID * Sudo * Shell * Reverse shell telnet * Sudo * Limited SUID * Shell tex * Sudo * Limited SUID * File upload * File download tftp * SUID * Sudo * File read tic * SUID * Sudo * Shell time * SUID * Sudo * Shell timedatectl * Sudo * Shell timeout * SUID * Sudo * Shell tmux * File read * Sudo * Shell top * Sudo * File read troff * SUID * Sudo tshark * Shell * File read ul * SUID * Sudo * File read unexpand * SUID * Sudo * File read uniq * SUID * Sudo * Shell unshare * SUID * Sudo * SUID update-alternatives * Sudo * File read uudecode * SUID * Sudo * File read uuencode * SUID * Sudo * Shell valgrind * Sudo * Shell * File write vi * File read * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download view * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * SUID vigr * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download vim * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download vimdiff * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * SUID vipw * Sudo * File write virsh * File read * Sudo * Shell * SUID watch * Sudo * Limited SUID * File read wc * SUID * Sudo * File upload * File download * File write wget * File read * SUID * Sudo * File read whiptail * SUID * Sudo * File upload whois * File download * Shell wish * Non-interactive reverse shell * Sudo * Shell * File read xargs * SUID * Sudo * Shell * File read xelatex * Sudo * Limited SUID * Shell xetex * Sudo * Limited SUID * File read xmodmap * SUID * Sudo * File read xmore * SUID * Sudo * File write * File read xxd * SUID * Sudo * File read xz * SUID * Sudo * Shell yarn * Sudo yelp * File read * File download yum * Sudo * Shell * File read zip * Sudo * Limited SUID * Shell * File write zsh * File read * SUID * Sudo * File read zsoelim * SUID * Sudo * Shell zypper * Sudo No binary matches...