GTFOBins

Linux machine chaining SMTP user enumeration, a CSRF-token-aware brute force of Roundcube Webmail, CVE-2025-49113 remote code execution, and sudo apt-get privilege escalation to root.

A practical Linux privilege escalation reference covering high-impact enumeration checks, common misconfigurations, credential hunting, container escapes, and last-resort kernel exploits.

Linux machine exploiting a public OpenNetAdmin RCE, chaining reused database credentials into an internal-only site, and abusing a sudo-permitted nano binary for root.

Linux machine chaining a leaked custom header from an exposed .git repo, a phar-wrapper file upload bypass with disabled-function evasion, a Python 2 input() SUID exploit, and sudo easy_install for root.

Linux machine chaining manual union-based SQL injection into a phpMyAdmin web shell, a Python command injection, and SUID systemctl abuse for root.

Linux machine chaining a WordPress plugin RFI for a foothold, sudo tar wildcard abuse for a second user, and a race condition in a root-run backup script for a SUID shell as root.

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

Linux machine exploiting the PHP 8.1.0-dev backdoor for remote code execution, then escalating to root through a sudo misconfiguration on knife.

Solaris machine using the finger service to enumerate valid users, brute forcing SSH, cracking a leaked shadow backup, and abusing a sudo wget rule for root.