Identifier / Programs / Linux and Unix
psql
PostgreSQL client. tldr-pages
GTFOBins inherit, shell 2 documented commands
How psql is abused
inherit
shell
Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for psql.
2 documented commands
inherit unprivileged, with sudo, as SUID
psql
\?shell unprivileged, with sudo, as SUID
psql
\! /bin/shNone of the 2 commands the identifier reads trips a Sigma process-creation rule. These commands are from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for psql. The identifier reads the line of each that runs psql.
Everyday use
Connect to the database. By default, it connects to the local socket using port 5432 with the currently logged in user
psql databaseIdentifyConnect to the database on given server host running on given port with given username, without a password prompt
psql --host host --port port --username username databaseIdentifyConnect to the database; user will be prompted for password
psql --host host --port port --username username --password databaseIdentifyNone of the 3 examples the identifier reads matches GTFOBins abuse or trips a Sigma process-creation rule.