emilkloeden/gtfo.py

Python3 command line interface for GTFOBins

gtfo.py

GTFOBins is a curated list of Unix binaries that can be exploited by an attacker to bypass local sec$

gtfo.py provides a command line interface over the top of the raw data.

Find the original project at https://gtfobins.github.io

Installation

Let's be honest. I'm never going to jump through the hoops to get this on PyPI. Just git clone it.

Usage

python3 --function limited-suid {name}

List all functions for a binary:

Filter for a specific function:

It is also recommended to add the following aliases:

alias gtfo="python3 /path/to/gtfo.py"
alias suid="python3 /path/to/gtfo.py -f suid"