Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think you're confused about the purpose of this project. From the website:

> It is important to note that this is not a list of exploits, and the programs listed here are not vulnerable per se, rather, GTFOBins is a compendium about how to live off the land when you only have certain binaries available.

This website is essentially a lookup table that teaches you how to break out of programs that you find on a system, but aren't intimately familiar with, e.g. during CTF challenges.



> e.g. during CTF

ah, makes sense, that also explains the slightly amateur-hour nature of some of them like shelling out of vi or gdb. I read the thing about not being vulnerabilities per-se (and if it hadn't have said that I'd have been irritated), but I did not catch the context of "live of the land".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: