Unix1 abuse funcs

ascii-xfrascii-xfr

Platform
Unix
Abuse functions
1

Description

ascii-xfr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1005. Defenders should monitor execution of ascii-xfr under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 1

file-read
sudosuidunprivileged

Abuses1

TypeTargetConfidenceTier
TechniqueData from Local Systemt100595%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
ascii85
LOLbin
as
LOLbin
xz
LOLbin
file
LOLbin
fmt
LOLbin
xmodmap
Sourced from GTFOBins. Curated by Adam Lundqvist, SQUR.