awk

Linux execution T1059

Text processing utility. Can be used to extract credential data, process file contents, or execute system commands via system() calls.

Binary Paths

  • /usr/bin/awk
  • /bin/awk
  • /usr/bin/gawk

Glob Patterns

Pattern Wildcards Notes
a?k
? Wildcard replaces 'w'
a*k
* Star matches 'w'
a[w]k
[] Bracket class on second char
[a]wk
[] Bracket class on first char
/usr/bin/a?k
? Full path wildcard
/???/bin/awk
? Directory obfuscation
gaw?
? Target gawk variant

Resources

← Back to Catalog