GTFOBins/GTFOBins.github.io
GTFOBins.github.io
GTFOBins is a curated knowledge base documenting security-related techniques for Unix-based system binaries. It serves as a reference for offensive security research, detailing how standard, pre-installed system utilities can be repurposed to facilitate privilege escalation, restricted environment escapes, and post-exploitation workflows.
The project distinguishes itself by cataloging insecure execution paths and misconfigured permissions inherent in common system tools. By identifying legitimate binary functions that can be leveraged to bypass security controls, the repository provides a structured index for auditing local system security and understanding methods for maintaining control during security assessments.
The platform is built as a static site that separates technical content from its visual presentation. It utilizes a standardized data schema to store binary specifications, which are processed through a template-driven build system to generate the final documentation. A pre-computed index enables client-side search functionality, allowing users to filter and locate specific binary techniques directly within the browser without a backend database.
Features
- Binary Security References - Provides a curated collection of legitimate system binaries that can be abused to bypass security controls.
- Privilege Escalation Tools - Documents techniques for leveraging binary functions to gain elevated access levels on Linux systems.
- Security Research Repositories - Documents how pre-installed system tools facilitate unauthorized operations during security assessments.
- Sandbox Restriction Bypasses - Details methods for bypassing security controls and restricted shells to escape sandboxed environments.
- Post-Exploitation Tools - Provides a reference for post-exploitation workflows, including file transfers and shell spawning using system tools.
- Search-Index-Based Retrieval - Provides a pre-computed index for rapid, client-side keyword searching across the documentation without a backend database.
- Security Check Bypasses - Identifies legitimate binary functions to circumvent security measures and escape restricted environments.
- Post Exploitation Frameworks - Repository of Unix binaries for living-off-the-land attacks.
- Security Testing and Auditing - Serves as a reference for auditing local system security by analyzing binary functions for potential weaknesses.
- Static Site Generation - Transforms structured data files into a collection of static HTML pages for deployment.
