mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-03-07 06:31:33 +01:00
13 lines
458 B
Plaintext
13 lines
458 B
Plaintext
---
|
|
functions:
|
|
file-read:
|
|
- code: |-
|
|
gcore $PID
|
|
comment: |-
|
|
It can be used to generate core dumps of running processes (`$PID`). Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
...
|