sed

Linux execution T1059

Stream editor for filtering and transforming text. Can read arbitrary files, extract credentials from configs, or serve as a code execution vector via -e flag.

Binary Paths

  • /bin/sed
  • /usr/bin/sed

Glob Patterns

Pattern Wildcards Notes
se?
? Wildcard replaces 'd'
s*d
* Star matches 'e'
s[e]d
[] Bracket class on second char
se[d]
[] Bracket class on last char
/bin/se?
? Full path wildcard
/???/bin/sed
? Directory obfuscation

Resources

← Back to Catalog