GTFOPlus

GTFOPlus is a helper script that relies on the GTFOBins repo to identify standard Linux binaries that could assist with privilege escalation.

Deploy a gtfo.sh script to enumerate these binaries on your target machine.

Example Usage:

python3 gtfo.py -b awk -l shell          | Spawning a shell with awk
python3 gtfo.py -b awk -l all            | Show all GTFO capabilities of awk
python3 gtfo.py -b awk -l all --verbose  | Increase verbosity + ascii art

Using the gtfo.sh agent script:

./gtfo.sh > gtf.out                      | Run this on target machine.
python3 gtfo.py -f gtf.out -l all        | Show all capabilities for all 
                                         | binaries gathered from gtfo.sh

Setup

In the same directory as that you cloned this repo, clone the GTFOBins Repo.

git clone https://github.com/GTFOBins/GTFOBins.github.io.git
python3 -m pip install -r requirements.txt

Requirements

python3
pyyaml

TODO:

• Make gtf.out parser better. (Add parser for groups, perms, ownership etc.)
• Pull GTFO bin capabilities from the repo as well.