# GTFOBins Escape (CTF challenge)

> Launch the environment and you drop into a LIVE terminal — but it's a locked-down MaintenanceShell that only lets you view logs under /var/log.

Canonical: https://codelivly.com/ctf/challenges/gtfobins-escape

| | |
|---|---|
| Category | Linux Exploitation |
| Difficulty | Hard |
| Points | 1500 |
| Estimated time | 40 min |
| Type | Live instance |
| Solves | 28 |
| Author | Codelivly |

Launch the environment and you drop into a LIVE terminal — but it's a locked-down MaintenanceShell that only lets you view logs under /var/log. The flag was restored somewhere you're not allowed to read directly. One of the tools the shell hands you is GTFOBins-abusable: use it to break out of the jail and read the flag. Enumeration + shell-escape only; there's no root to gain (the container is the sandbox). The flag is unique to your instance.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)