Identifier / Programs / Linux and Unix
atobm
GTFOBins file-read 1 documented command
How atobm is abused
file-read
Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for atobm.
1 documented command
file-read unprivileged, with sudo, as SUID
Outputs only the first line of the file to standard error without the - and # characters, this can be customized with the -c option, by default is -c -#. Content can be retrieved with awk -F "'" '{printf "%s", $2}'.
atobm /path/to/input-fileThe command the identifier reads trips no Sigma process-creation rule. This command is, with GTFOBins’ notes, from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for atobm. The identifier reads the line that runs atobm.