sed

Linux execution T1059

Stream editor for filtering and transforming text. Can read arbitrary files, extract credentials from configs, or serve as a code execution vector via -e flag.

Binary Paths

  • /bin/sed
  • /usr/bin/sed

Glob Patterns

Pattern Notes
se?
Wildcard replaces 'd'
s*d
Star matches 'e'
s[e]d
Bracket class on second char
se[d]
Bracket class on last char
/bin/se?
Full path wildcard
/???/bin/sed
Directory obfuscation

Pattern Tester

$

Try typing sed or a full path like /bin/sed

YARA Rule

Auto-generated detection rule for sed

      

Resources

← Previous screen Catalog Next → socat