GTFOBins is a curated database documenting how standard Unix utilities can be exploited to bypass security restrictions. The resource catalogs techniques for privilege escalation, file read/write, and shell access.
GTFOBins provides security professionals and system administrators with a comprehensive reference for understanding potential attack vectors through legitimate system binaries. The database details exploitation techniques for common Unix tools including sudo, find, awk, and curl.
Each entry includes command examples, required conditions, and exploitation methods. The resource covers multiple attack scenarios: privilege escalation, breaking out of restricted shells, file operations, and reverse shell techniques.
The project serves dual purposes in security work. Penetration testers use it to identify exploitation paths during assessments. Defenders reference it to understand how standard utilities can be weaponized and implement appropriate controls.
GTFOBins emphasizes that these are legitimate system tools repurposed for unintended functions rather than traditional exploits. The database remains actively maintained with community contributions documenting newly discovered techniques and platform-specific variations across Linux, BSD, and macOS systems.
A new Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service attacks and root-level privilege escalation.
The FBI has dismantled proxy tools used by Chinese hackers in a widespread campaign against NASA, the Federal Reserve, the US Senate, and the Justice Department. The operation marks a significant coordinated response to months of intrusions into critical US infrastructure.
Snowflake is phasing out password authentication for legacy service accounts, requiring organizations to adopt passwordless methods. The real challenge: identifying which accounts exist, who manages them, and what access they hold.
Medical technology company Boston Scientific disclosed a cyberattack that disrupted IT systems and operations worldwide. The company is working to restore normal services.