Unix5 abuse funcs

jjsjjs

Platform
Unix
Abuse functions
5

Description

jjs is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, reverse-shell, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1005, T1059, T1071, T1105, T1565. Defenders should monitor execution of jjs under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 5

download
sudounprivileged
file-read
sudounprivileged
file-write
sudounprivileged
reverse-shell
sudounprivileged
shell
sudounprivileged

Abuses4

TypeTargetConfidenceTier
TechniqueApplication Layer Protocolt1071100%live
TechniqueData from Local Systemt100595%live
TechniqueCommand and Scripting Interpretert105990%live
TechniqueIngress Tool Transfert110585%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
jrunscript
LOLbin
jshell
LOLbin
jq
LOLbin
arj
LOLbin
jtag
LOLbin
Jsc.exe
Sourced from GTFOBins. Curated by Adam Lundqvist, SQUR.