gtfobins

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

Search gtfobins and lolbas files from your terminal

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), and WADComs (https://wadcoms.github.io).

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

Search for Unix binaries that can be exploited to bypass system security restrictions.

gtfo, now with the speed of golang

Webscrapper written in python3 to show gtfobins in a terminal.

Get GTFOBins info about a given exploit from the command line

A Tool which can exploit 137 files from GTFO-Bins automaticlly

GTFOBins Offline Terminal with python

This tool help you to search the binary information on GTFOBins from your terminal.

Sigma rules for GTFOBins linux command detection

Abuse suid mis-configured binaries like a pro with -4buzer.

Curated list of Unix binaries that can be exploited to bypass system security restrictions

This script search for the bin on the https://gtfobins.github.io/ for the SUID exploit and returns the bins that have exploit available on gtfobins. So you don't need to manually search for every file on the site.

Amazon Linux Triage for Anyone and Everyone

This script allows you to find and enumerate SUID binaries and check if one of them can be used to escalate or mantain elevated privileges in a iteractive way.

** Deprecated! Now maintained at https://github.com/nccgroup/GTFOBLookup ** Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io)