GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries.
Features
- Automatically escalate privileges using misconfigured sudo permissions.
- Automatically escalate privileges using misconfigured suid permissions.
- Automatically escalated privileges using misconfigured capabilities.
- Supports Python 2 and 3.
- No third party libraries required.
- Support sudo
PASSWD
andNOPASSWD
escalation, automatically attempts to enumerate sudo binaries for when password is not known andsudo -l
is not accessible.
Usage Examples
Default Mode - Scan All
Capability Escalation
Sudo Escalation and Verbose Mode
Todo
- Parse
sudo -l
for less noisy sudo privilege escalations. - Add more types of capability escalation.
Credits
- Payloads thanks to GTFOBins.