Identifier / Programs / Linux and Unix
batcat
Print and concatenate files. A cat clone with syntax highlighting and Git integration. tldr-pages
GTFOBins inherit 1 documented command
How batcat is abused
inherit
--pagingEach abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for batcat.
1 documented command
inherit unprivileged, with sudo, as SUID
--paging always can be omitted provided that the output doesn't fit the screen.
batcat --paging always /etc/hostsIdentifyThe command the identifier reads trips no Sigma process-creation rule. This command is, with GTFOBins’ notes, from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for batcat. The identifier reads the line that runs batcat.
Everyday use
Pretty print the contents of one or more files to stdout
bat path/to/file1 path/to/file2 ...IdentifyConcatenate several files into the target file
bat path/to/file1 path/to/file2 ... >path/to/target_fileIdentifyRemove decorations and disable paging
bat [-pp|--style plain --pager never] path/to/fileIdentifyNone of the 3 examples the identifier reads matches GTFOBins abuse or trips a Sigma process-creation rule.