https://gtfobins.github.io/ GTFOBins Star logo GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems. The project collects legitimate functions of Unix binaries that can be abused to [DEL:get the f**k:DEL] break out restricted shells, escalate or maintain elevated privileges, transfer files, spawn bind and reverse shells, and facilitate the other post-exploitation tasks. It is important to note that this is not a list of exploits, and the programs listed here are not vulnerable per se, rather, GTFOBins is a compendium about how to live off the land when you only have certain binaries available. GTFOBins is a collaborative project created by Emilio Pinna and Andrea Cardaci where everyone can contribute with additional binaries and techniques. If you are looking for Windows binaries you should visit LOLBAS. * Shell * Command * Reverse shell * Non-interactive reverse shell * Bind shell * Non-interactive bind shell * File upload * File download * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID [ ] Binary Functions * File read 7z * Sudo * Shell aa-exec * SUID * Sudo * File upload * File download ab * SUID * Sudo agetty * SUID * File read alpine * SUID * Sudo * Shell ansible-playbook * Sudo * Shell ansible-test * Sudo * Shell aoss * Sudo * Shell apt-get * Sudo * Shell apt * Sudo * File read ar * SUID * Sudo * Command * File download aria2c * Sudo * Limited SUID * File write * File read arj * SUID * Sudo * File read arp * SUID * Sudo * File read as * SUID * Sudo * File read ascii-xfr * SUID * Sudo * File read ascii85 * Sudo * Shell * File write ash * SUID * Sudo * File read aspell * SUID * Sudo * Shell at * Command * Sudo * File read atobm * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write awk * File read * SUID * Sudo * Limited SUID * Shell aws * Sudo * File read base32 * SUID * Sudo * File read base58 * Sudo * File read base64 * SUID * Sudo * File read basenc * SUID * Sudo * File read basez * SUID * Sudo * Shell * Reverse shell * File upload * File download bash * File write * File read * Library load * SUID * Sudo * Shell batcat * Sudo * Limited SUID * File read bc * SUID * Sudo * Shell bconsole * File read * Sudo bpftrace * Sudo * File read bridge * SUID * Sudo * Shell bundle * Sudo * Shell bundler * Sudo * Shell busctl * Sudo * Shell * File upload * File write busybox * File read * SUID * Sudo * Shell byebug * Sudo * Limited SUID * File read bzip2 * SUID * Sudo * Shell * File write c89 * File read * Sudo * Shell * File write c99 * File read * Sudo * Shell cabal * SUID * Sudo cancel * File upload * Shell capsh * SUID * Sudo * File read cat * SUID * Sudo * Shell cdist * Sudo * Shell certbot * Sudo * Shell check_by_ssh * Sudo * File read check_cups * Sudo * File write check_log * File read * Sudo * File read check_memory * Sudo * File read check_raid * Sudo * Command check_ssl_cert * Sudo * File read check_statusfile * Sudo * SUID chmod * Sudo * Shell choom * SUID * Sudo * SUID chown * Sudo * SUID chroot * Sudo * File read cmp * SUID * Sudo * Shell cobc * Sudo * File read column * SUID * Sudo * File read comm * SUID * Sudo * Shell composer * Sudo * Limited SUID * Shell cowsay * Sudo * Shell cowthink * Sudo * File write * File read cp * SUID * Sudo * Shell * Reverse shell cpan * File upload * File download * Sudo * Shell * File write cpio * File read * SUID * Sudo * Shell cpulimit * SUID * Sudo * Shell crash * Command * Sudo * Command crontab * Sudo * Shell * File write csh * SUID * Sudo * File write * File read csplit * SUID * Sudo * Shell * File write csvtool * File read * SUID * Sudo * File read cupsfilter * SUID * Sudo * File upload * File download * File write curl * File read * SUID * Sudo * File read cut * SUID * Sudo * Shell * File write dash * SUID * Sudo * File read date * SUID * Sudo * File write * File read dd * SUID * Sudo * Shell debugfs * SUID * Sudo * File read dialog * SUID * Sudo * File read diff * SUID * Sudo * File read dig * SUID * Sudo * Shell distcc * SUID * Sudo * Shell dmesg * File read * Sudo dmidecode * Sudo * SUID dmsetup * Sudo dnf * Sudo * Shell * File write docker * File read * SUID * Sudo dos2unix * File write * File write * File read dosbox * SUID * Sudo * Shell dotnet * File read * Sudo * Shell dpkg * Sudo * Shell dstat * Sudo * Shell dvips * Sudo * Limited SUID * Shell * Reverse shell * File upload * File download easy_install * File write * File read * Library load * Sudo * Shell eb * Sudo * Shell * File write * File read ed * SUID * Sudo * Limited SUID * SUID efax * Sudo * Shell * File write elvish * File read * SUID * Sudo * Shell * File write emacs * File read * SUID * Sudo * Shell env * SUID * Sudo * File read eqn * SUID * Sudo * File read espeak * SUID * Sudo * Shell * File write ex * File read * Sudo * File write exiftool * File read * Sudo * File read expand * SUID * Sudo * Shell * File read expect * SUID * Sudo * Shell facter * Sudo * File read file * SUID * Sudo * Shell find * SUID * Sudo * File upload finger * File download * Shell fish * SUID * Sudo * Shell flock * SUID * Sudo * File read fmt * SUID * Sudo * File read fold * SUID * Sudo * File read fping * Sudo * Shell * File upload ftp * File download * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write gawk * File read * SUID * Sudo * Limited SUID * Shell * File write gcc * File read * Sudo * Shell gcloud * Sudo * File read gcore * SUID * Sudo * Shell * Reverse shell * File upload * File download * File write gdb * File read * Library load * SUID * Sudo * Capabilities * Shell gem * Sudo * Shell genie * SUID * Sudo * File read genisoimage * SUID * Sudo * Shell ghc * Sudo * Shell ghci * Sudo * Shell * Reverse shell * File upload * File download gimp * File write * File read * Library load * SUID * Sudo * Shell ginsh * Sudo * Limited SUID * Shell * File read git * Sudo * Limited SUID * Shell grc * Sudo * File read grep * SUID * Sudo * Shell * File write gtester * SUID * Sudo * File read gzip * SUID * Sudo * File read hd * SUID * Sudo * File read head * SUID * Sudo * File read hexdump * SUID * Sudo * File read highlight * SUID * Sudo * Shell hping3 * SUID * Sudo * File write * File read iconv * SUID * Sudo * Shell iftop * Sudo * Limited SUID * SUID install * Sudo * Shell ionice * SUID * Sudo * File read ip * SUID * Sudo * Shell * Reverse shell * File upload * File download irb * File write * File read * Library load * Sudo * Shell ispell * SUID * Sudo * Shell * Reverse shell * File download jjs * File write * File read * SUID * Sudo * Shell joe * Sudo * Limited SUID * File read join * SUID * Sudo * Shell journalctl * Sudo * File read jq * SUID * Sudo * Shell * Reverse shell * File download jrunscript * File write * File read * SUID * Sudo * Shell jtag * Sudo * Shell * Reverse shell * File download julia * File write * File read * SUID * Sudo * Shell knife * Sudo * Shell * Reverse shell * File upload * File download ksh * File write * File read * SUID * Sudo * File read ksshell * SUID * Sudo ksu * Sudo * File upload kubectl * SUID * Sudo * Shell * File read latex * Sudo * Limited SUID * Shell latexmk * File read * Sudo * Shell ld.so * SUID * Sudo * Sudo ldconfig * Limited SUID * Shell * File write less * File read * SUID * Sudo * Shell lftp * Sudo * Limited SUID ln * Sudo * Shell loginctl * Sudo * Shell logsave * SUID * Sudo * File read look * SUID * Sudo lp * File upload * Shell * File write ltrace * File read * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download lua * File write * File read * SUID * Sudo * Limited SUID * Shell lualatex * Sudo * Limited SUID * Shell luatex * Sudo * Limited SUID * File download * File write lwp-download * File read * Sudo * File read lwp-request * Sudo * Shell mail * Sudo * Shell * File write make * SUID * Sudo * Shell man * File read * Sudo * Shell * File write * File read mawk * SUID * Sudo * Limited SUID * Shell * File read more * SUID * Sudo * File read mosquitto * SUID * Sudo mount * Sudo * Shell msfconsole * Sudo * File read msgattrib * SUID * Sudo * File read msgcat * SUID * Sudo * File read msgconv * SUID * Sudo * Shell * File read msgfilter * SUID * Sudo * File read msgmerge * SUID * Sudo * File read msguniq * SUID * Sudo * File read mtr * Sudo * Shell multitime * SUID * Sudo * SUID mv * Sudo * Shell * Library load mysql * Sudo * Limited SUID * Shell * File write nano * File read * Sudo * Limited SUID * File read nasm * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File write nawk * File read * SUID * Sudo * Limited SUID * Reverse shell * Bind shell * File upload nc * File download * Sudo * Limited SUID * Shell ncftp * SUID * Sudo * Shell neofetch * File read * Sudo * File read nft * SUID * Sudo * Shell nice * SUID * Sudo * File read nl * SUID * Sudo * File read nm * SUID * Sudo * Shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download nmap * File write * File read * SUID * Sudo * Limited SUID * Shell * Reverse shell * Bind shell * File upload * File download node * File write * File read * SUID * Sudo * Capabilities * Shell * Command nohup * SUID * Sudo * Shell npm * Sudo * Shell nroff * File read * Sudo * Shell nsenter * Sudo * Shell * File write octave * File read * Sudo * Limited SUID * File read od * SUID * Sudo * Reverse shell * File upload * File download * File write openssl * File read * Library load * SUID * Sudo * Shell * File read openvpn * SUID * Sudo openvt * Sudo opkg * Sudo * File write * File read pandoc * SUID * Sudo * File read paste * SUID * Sudo pax * File read * Shell pdb * Sudo * Shell * File read pdflatex * Sudo * Limited SUID * Shell pdftex * Sudo * Limited SUID * Shell perf * SUID * Sudo * Shell * Reverse shell * File read perl * SUID * Sudo * Capabilities * Shell perlbug * Sudo * Shell pexec * SUID * Sudo * Shell * File read pg * SUID * Sudo * Shell * Command * Reverse shell * File upload * File download php * File write * File read * SUID * Sudo * Capabilities * Shell * File read pic * Sudo * Limited SUID * Shell * File write pico * File read * Sudo * Limited SUID * Command pidstat * SUID * Sudo * Shell * Reverse shell * File upload * File download pip * File write * File read * Library load * Sudo pkexec * Sudo pkg * Sudo * Shell posh * Sudo * Limited SUID * File read pr * SUID * Sudo * Shell pry * Sudo * Limited SUID * Shell psftp * Sudo * Limited SUID * Shell psql * Sudo * File read ptx * SUID * Sudo * Shell * File write puppet * File read * Sudo * Shell pwsh * File write * Sudo * Shell * Reverse shell * File upload * File download * File write python * File read * Library load * SUID * Sudo * Capabilities * Shell * File read rake * Sudo * Limited SUID * Shell rc * SUID * Sudo * File read readelf * SUID * Sudo * File write red * File read * Sudo * File read redcarpet * Sudo redis * File write * File upload restic * SUID * Sudo * File read rev * SUID * Sudo rlogin * File upload * Shell * File write rlwrap * SUID * Sudo * Shell rpm * Sudo * Limited SUID * Shell rpmdb * Sudo * Limited SUID * Shell rpmquery * Sudo * Limited SUID * Shell rpmverify * Sudo * Limited SUID * Shell rsync * SUID * Sudo * Shell rtorrent * SUID * Shell * Reverse shell * File upload * File download ruby * File write * File read * Library load * Sudo * Capabilities * Shell * File write run-mailcap * File read * Sudo * Shell run-parts * SUID * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download rview * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download rvim * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell sash * SUID * Sudo * Shell scanmem * SUID * Sudo * Shell * File upload scp * File download * Sudo * Limited SUID * Shell screen * File write * Sudo * Shell script * File write * Sudo * Shell scrot * Sudo * Limited SUID * Shell * Command * File write sed * File read * SUID * Sudo * Shell service * Sudo * Shell setarch * SUID * Sudo * SUID setfacl * Sudo * Shell setlock * SUID * Sudo * Shell * File upload sftp * File download * Sudo * Shell sg * Sudo * File write * File read shuf * SUID * Sudo * Shell slsh * Sudo * Limited SUID * Shell * File upload smbclient * File download * Sudo snap * Sudo * Shell * Reverse shell * Bind shell * File upload socat * File download * File write * File read * Sudo * Limited SUID * Reverse shell socket * Bind shell * File read soelim * SUID * Sudo * Shell softlimit * SUID * Sudo * File read sort * SUID * Sudo * Shell * Command split * File write * File read * Sudo * Shell * File write * File read sqlite3 * SUID * Sudo * Limited SUID * Shell sqlmap * Sudo * File read ss * SUID * Sudo * Shell ssh-agent * SUID * Sudo * Library load ssh-keygen * SUID * Sudo * File read ssh-keyscan * SUID * Sudo * Shell * File upload ssh * File download * File read * Sudo * Shell sshpass * SUID * Sudo * Shell start-stop-daemon * SUID * Sudo * Shell stdbuf * SUID * Sudo * Shell * File write strace * SUID * Sudo * File read strings * SUID * Sudo su * Sudo * Command * File read sysctl * SUID * Sudo * SUID systemctl * Sudo systemd-resolve * Sudo * File read tac * SUID * Sudo * File read tail * SUID * Sudo * Shell * File upload * File download tar * File write * File read * Sudo * Limited SUID * Shell task * Sudo * Shell taskset * SUID * Sudo * Shell tasksh * Sudo * Limited SUID * File read tbl * SUID * Sudo * Shell * Non-interactive reverse shell tclsh * SUID * Sudo * Command tcpdump * Sudo * Shell tdbtool * Sudo * Limited SUID * File write tee * SUID * Sudo * Shell * Reverse shell telnet * Sudo * Limited SUID * Shell tex * Sudo * Limited SUID * File upload * File download tftp * SUID * Sudo * File read tic * SUID * Sudo * Shell time * SUID * Sudo * Shell timedatectl * Sudo * Shell timeout * SUID * Sudo * Shell tmate * Sudo * Limited SUID * Shell tmux * File read * Sudo * Shell top * Sudo * Shell torify * Sudo * Shell torsocks * Sudo * File read troff * SUID * Sudo tshark * Shell * File read ul * SUID * Sudo * File read unexpand * SUID * Sudo * File read uniq * SUID * Sudo * Shell unshare * SUID * Sudo * SUID unzip * Sudo * SUID update-alternatives * Sudo * File read uudecode * SUID * Sudo * File read uuencode * SUID * Sudo * Shell vagrant * SUID * Sudo * Shell valgrind * Sudo * Shell * File write vi * File read * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download view * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * SUID vigr * Sudo * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download vim * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * Shell * Reverse shell * Non-interactive reverse shell * Non-interactive bind shell * File upload * File download vimdiff * File write * File read * Library load * SUID * Sudo * Capabilities * Limited SUID * SUID vipw * Sudo * File write virsh * File read * Sudo volatility * Shell * File read w3m * SUID * Sudo wall * Sudo * Shell * SUID watch * Sudo * Limited SUID * File read wc * SUID * Sudo * Shell * File upload * File download wget * File write * File read * SUID * Sudo * File read whiptail * SUID * Sudo * File upload whois * File download wireshark * Sudo * Shell wish * Non-interactive reverse shell * Sudo * Shell * File read xargs * SUID * Sudo * Shell xdotool * SUID * Sudo * Shell * File read xelatex * Sudo * Limited SUID * Shell xetex * Sudo * Limited SUID * File read xmodmap * SUID * Sudo * File read xmore * SUID * Sudo * File read xpad * Sudo * File write * File read xxd * SUID * Sudo * File read xz * SUID * Sudo * Shell yarn * Sudo * Shell yash * SUID * Sudo yelp * File read * File download yum * Sudo * Shell zathura * Sudo * Shell * File read zip * Sudo * Limited SUID * Shell * File write zsh * File read * SUID * Sudo * File read zsoelim * SUID * Sudo * Shell zypper * Sudo No binary matches...