cat

Linux discovery T1083

Concatenate and display file contents. Used for reading sensitive files like /etc/passwd, /etc/shadow, SSH keys, and configuration files.

Binary Paths

  • /bin/cat
  • /usr/bin/cat

Glob Patterns

Pattern Wildcards Notes
ca?
? Wildcard replaces 't'
c*t
* Star matches 'a'
c[a]t
[] Bracket class on second char
ca[t]
[] Bracket class on last char
/bin/ca?
? Full path wildcard
/???/cat
? Obfuscate /bin/ prefix
/b?n/cat
? Wildcard in bin directory
c?t
? Middle wildcard

Resources

← Back to Catalog