mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-26 06:49:44 +01:00
11 lines
444 B
Markdown
11 lines
444 B
Markdown
|
---
|
||
|
|
description: It can be used to generate core dumps of running processes. Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.
|
||
|
|
functions:
|
||
|
|
file-read:
|
||
|
|
- code: gcore $PID
|
||
|
|
sudo:
|
||
|
|
- code: sudo gcore $PID
|
||
|
|
suid:
|
||
|
|
- code: ./gcore $PID
|
||
|
|
---
|