Catalog GTFOBins

GTFO · Tool

gcore

3 techniques LinuxGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation Linux

It can be used to generate core dumps of running processes (`$PID`). Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.

gcore $PID
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation Linux

It can be used to generate core dumps of running processes (`$PID`). Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.

gcore $PID
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read Linux

It can be used to generate core dumps of running processes (`$PID`). Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.

gcore $PID
Context
unprivileged
Native
file-read
MITRE
T1005