$loading...
GTFOBins is the authoritative reference for Unix binary abuse during privilege escalation — look it up first. Payload Playground complements it by generating complete, customised attack payloads: enter your attacker IP and port, select the technique, and get a ready-to-paste exploit chain for SUID binaries, sudo misconfigurations, and cron-based privesc.
GTFOBins (gtfobins.github.io) is the definitive reference for binary abuse. It documents hundreds of binaries with every known exploitation technique — sudo, SUID, file read, file write, and shell spawn. Use GTFOBins to discover what is exploitable, then Payload Playground to generate the specific payload for your engagement.
You need to look up a specific binary to find every documented exploitation path — sudo, SUID, file read/write, shell spawn, and more. GTFOBins is the single most comprehensive and up-to-date reference for Linux binary abuse. No tool replaces it for discovery.
You know the technique and need the exact payload. Generate complete SUID exploitation commands, reverse shells, cron persistence entries, and sudo abuse payloads with your attacker IP and port pre-filled — ready to use during a live penetration test.
| Feature | Payload Playground | GTFOBins |
|---|---|---|
| Binary Reference Database | Hundreds of binaries | |
| SUID Exploitation Techniques | Payload generation | Full reference |
| Sudo Abuse Techniques | Payload generation | Full reference |
| Customised Payloads (IP/Port) | ||
| Reverse Shell via SUID Binary | ||
| Cron Privilege Escalation | ||
| Complete Attack Chains | ||
| Windows / LOLBAS Coverage | msfvenom builder | |
| Persistent Cron Payloads | ||
| Privesc Cheat Sheet | ||
| CLI Tool |
GTFOBins shows the technique. Payload Playground generates the exact command with your attacker IP and port pre-filled — ready to paste into your terminal during a live engagement.
Chain SUID abuse into a full reverse shell, combine sudo misconfigurations with persistence, or generate cron-based privilege escalation payloads — not just single-binary one-liners.
GTFOBins is Linux-only. Payload Playground covers Windows post-exploitation payloads via the msfvenom builder — EXE, DLL, PowerShell stagers, and more — alongside LOLBAS-style techniques.
Generate cron job abuse payloads for privilege escalation and persistence. Set your callback details and get complete cron entries, writable script injection commands, and systemd timer techniques.
SUID, sudo, and cron privilege escalation payloads
Windows and Linux payloads with custom IP/port
Persistence and privesc via cron job abuse
30+ shell types for post-exploitation
XSS, SQLi, SSTI, SSRF, reverse shells, and more
Generate privesc payloads from your terminal