gtfobins-cli

🚀 GTFOBins CLI Descripción general GTFOBins CLI es una interfaz de línea de comandos para GTFOBins, que proporciona acceso instantáneo a técnicas de explotación de binarios Unix. Esta herramienta ayuda a profesionales de seguridad y administradores de sistemas a identificar y comprender cómo se...

LOLBins

LOLBins Aplicación PyQT para listar todos los Binarios y Scripts Living Off The Land para Windows desde LOLBAS y binarios Unix que pueden usarse para evitar restricciones de seguridad locales en sistemas mal configurados desde GTFOBins. Windows Linux...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

SUID3NUM

SUID3NUM Un script independiente de python2/3 que utiliza los módulos integrados de Python para encontrar bins SUID, separar bins predeterminados de bins personalizados, compararlos con bins en el repositorio de GTFO Bins y explotarlos automáticamente, ¡todo con colores! ͡ʘ ͜ʖ ͡ʘ Descripción Un...

GTFOBins.github.io

GTFOBins GTFOBins es una lista curada de ejecutables tipo Unix que pueden ser usados para eludir restricciones de seguridad locales en sistemas mal configurados. Encuentra el proyecto en: gtfobins.org...

SUDO_KILLER

⭐ Danos una estrella en GitHub — para mostrar tu apoyo! 💡 Mejor visualizado en modo oscuro : El proyecto SUDOKILLER llegó a la final del SANS Difference Award 2023 en la categoría de herramienta de código abierto. Contribuyendo Stargazers a lo largo del tiempo Soporte Créditos Descargo de...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

traitor

Traitor आसान लक्ष्यों का स्वचालित रूप से शोषण करके रूट शेल प्राप्त करें। Linux विशेषाधिकार वृद्धि अब आसान! Traitor स्थानीय गलत कॉन्फ़िगरेशन और कमजोरियों का शोषण करके रूट शेल प्राप्त करने के लिए कई तरीकों को एक साथ पैक करता है: GTFOBins का लगभग सब कुछ Writeable docker.sock CVE-2022-0847 Dirty pipe...

CTF-CVE-2019-9053-GTFOBins

CTF, CVE-2019-9053, GTFOBins Utilicé las máquinas de https://tryhackme.com/ y mi propio Kali en WSL para realizar este ejercicio y es parte del desafío CTF. La siguiente información me ayudó a resolver el desafío: vim en https://gtfobins.github.io/gtfobins/vim/ y https://gtfobins.github.io/ sudoe...

EUVD-2026-9514

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

EUVD-2026-9513

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

CVE-2026-29122

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

CVE-2026-29121 `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

PT-2026-23099

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The IDC SFX2100 satellite receiver includes the /bin/date utility installed with the setuid bit set. This configuration allows any local user who can execute the binary...

PT-2026-23098

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The /sbin/ip utility is installed with the setuid bit set on the IDC SFX2100 satellite receiver. This configuration allows any local user who can execute the binary to...

LOLBins - PyQT5 App For LOLBAS And GTFOBins

PyQT app to list all Living Off The Land Binaries and Scripts for Windows from LOLBAS and Unix binaries that can be used to bypass local security restrictions in misconfigured systems from GTFOBins. Widnows Linux Download LOLBins...

Gtfo - Search For Unix Binaries That Can Be Exploited To Bypass System Security Restrictions

This is a standalone script written in Python 3 for GTFOBins. You can search for Unix binaries that can be exploited to bypass system security restrictions. These binaries can be abused to get the fk break out of restricted shells, escalate privileges, transfer files, spawn bind and reverse shell...

CVE-2019-19585

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an “rConfig specific Apache configuration” update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions...