wiki created
This commit is contained in:
@@ -0,0 +1,56 @@
|
||||
# cat - Read File Contents
|
||||
|
||||
Read and display the contents of a file on the target system.
|
||||
|
||||
## Description
|
||||
|
||||
The `cat` command reads and displays the contents of a file on the target system. It automatically detects and extracts credentials from file contents including plaintext passwords, NTLM hashes, and domain credentials.
|
||||
|
||||
## Syntax
|
||||
|
||||
```
|
||||
cat <file_path>
|
||||
```
|
||||
|
||||
## Parameters
|
||||
|
||||
- `file_path` (required): Path to the file to read. Supports both absolute and relative paths.
|
||||
|
||||
## Examples
|
||||
|
||||
```
|
||||
cat C:\Users\Administrator\Desktop\notes.txt
|
||||
cat config.ini
|
||||
cat C:\Windows\System32\drivers\etc\hosts
|
||||
```
|
||||
|
||||
## Features
|
||||
|
||||
- Supports both absolute and relative paths (relative paths are resolved using the current working directory)
|
||||
- Automatically detects and extracts credentials from file contents including:
|
||||
|
||||
## Output
|
||||
|
||||
```
|
||||
[cat] Reading file: C:\Users\Administrator\notes.txt
|
||||
Hello, this is a test file.
|
||||
|
||||
[cat] Credentials detected:
|
||||
- Password: MyPassword123
|
||||
- Hash: aad3b435b51404ee:1234567890abcdef...
|
||||
```
|
||||
|
||||
## OPSEC Considerations
|
||||
|
||||
- File reads are logged by EDR/XDR solutions
|
||||
- Accessing sensitive files (System32, Program Files) may trigger alerts
|
||||
- Consider using `download` for large files instead of `cat`
|
||||
|
||||
## Related
|
||||
|
||||
[Credentials Support](../../../features.md#credentials-support)
|
||||
|
||||
---
|
||||
|
||||
**Command Category:** File System
|
||||
**Requires Admin:** No
|
||||
Reference in New Issue
Block a user