gccLOLBIN
Compiles local exploits (kernel, .so modules) on the target.
Legitimate system binary (LOLBIN): not an offensive tool as such, but an attacker leverages it because it is usually already installed and raises fewer suspicions than dropping a dedicated tool.
The GNU C compiler. In escalation it is used on the target itself to compile kernel exploits, malicious .so libraries (LD_PRELOAD) or small custom SUID binaries.
Family Privilege escalation
Flags -o -static -m32
Concepts Linux kernel exploit
Cheatsheet Kernel & local exploits
Installation
sudo apt install gccUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.