marcos.luna
57 lines
1.3 KiB
Markdown
57 lines
1.3 KiB
Markdown
# cat - Read File Contents
|
|
|
|
Read and display the contents of a file on the target system.
|
|
|
|
## Description
|
|
|
|
The `cat` command reads and displays the contents of a file on the target system. It automatically detects and extracts credentials from file contents including plaintext passwords, NTLM hashes, and domain credentials.
|
|
|
|
## Syntax
|
|
|
|
```
|
|
cat <file_path>
|
|
```
|
|
|
|
## Parameters
|
|
|
|
- `file_path` (required): Path to the file to read. Supports both absolute and relative paths.
|
|
|
|
## Examples
|
|
|
|
```
|
|
cat C:\Users\Administrator\Desktop\notes.txt
|
|
cat config.ini
|
|
cat C:\Windows\System32\drivers\etc\hosts
|
|
```
|
|
|
|
## Features
|
|
|
|
- Supports both absolute and relative paths (relative paths are resolved using the current working directory)
|
|
- Automatically detects and extracts credentials from file contents including:
|
|
|
|
## Output
|
|
|
|
```
|
|
[cat] Reading file: C:\Users\Administrator\notes.txt
|
|
Hello, this is a test file.
|
|
|
|
[cat] Credentials detected:
|
|
- Password: MyPassword123
|
|
- Hash: aad3b435b51404ee:1234567890abcdef...
|
|
```
|
|
|
|
## OPSEC Considerations
|
|
|
|
- File reads are logged by EDR/XDR solutions
|
|
- Accessing sensitive files (System32, Program Files) may trigger alerts
|
|
- Consider using `download` for large files instead of `cat`
|
|
|
|
## Related
|
|
|
|
[Credentials Support](../../../features.md#credentials-support)
|
|
|
|
---
|
|
|
|
**Command Category:** File System
|
|
**Requires Admin:** No
|