awk

Linux execution T1059

Text processing utility. Can be used to extract credential data, process file contents, or execute system commands via system() calls.

Binary Paths

  • /usr/bin/awk
  • /bin/awk
  • /usr/bin/gawk

Glob Patterns

Pattern Notes
a?k
Wildcard replaces 'w'
a*k
Star matches 'w'
a[w]k
Bracket class on second char
[a]wk
Bracket class on first char
/usr/bin/a?k
Full path wildcard
/???/bin/awk
Directory obfuscation
gaw?
Target gawk variant

Pattern Tester

$

Try typing awk or a full path like /usr/bin/awk

YARA Rule

Auto-generated detection rule for awk

      

Resources

← Previous Test-Connection Catalog Next → base64