the_open_door
coffee
ESEN
← Tools

rsync

Syncs/exfiltrates files; abusable anonymous modules and SUID.

A file-synchronisation tool. In pentesting it exposes anonymously shared modules (port 873) that allow reading or writing on the system, and as a SUID binary it can be abused to escalate.

Family Access, shells & transfer

Flags -av rsync://

Cheatsheet File transfer

Installation

sudo apt install -y rsync

Useful commands3 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

  • YummyHackTheBox
  • ZabProving Grounds Practice