Identifier / Programs / Linux and Unix
pygmentize
Python-based syntax highlighter. tldr-pages
GTFOBins file-read 1 documented command
How pygmentize is abused
file-read
-lEach abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for pygmentize.
1 documented command
file-read unprivileged, with sudo
pygmentize -l text /path/to/input-fileThe command the identifier reads trips no Sigma process-creation rule. This command is from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for pygmentize. The identifier reads the line that runs pygmentize.
Everyday use
Highlight file syntax and print to stdout (language is inferred from the file extension)
pygmentize file.pyIdentifyExplicitly set the language for syntax highlighting
pygmentize -l javascript input_fileIdentifyList available lexers (processors for input languages)
pygmentize -L lexersIdentifyNone of the 3 examples the identifier reads matches GTFOBins abuse or trips a Sigma process-creation rule.