mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-26 14:59:44 +01:00
1468b6c2bd
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
11 lines
444 B
Markdown
11 lines
444 B
Markdown
---
|
|
description: It can be used to generate core dumps of running processes. Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named `core.$PID`, that is then often filtered with `strings` to narrow down relevant information.
|
|
functions:
|
|
file-read:
|
|
- code: gcore $PID
|
|
sudo:
|
|
- code: sudo gcore $PID
|
|
suid:
|
|
- code: ./gcore $PID
|
|
---
|