Linux

  • ${IFS} in place ofm space if you're having trouble with spaces - works in bash only

  • can also pipe a command to base64 (make sure the command you build also pipes itself to base64 -d)

lateral movement

  • find process where someone might be logged in ps -A

  • gcore $PID

  • strings core.$PID

  • read creds

PreviousMethodsNextBox Notes

Last updated