Ceplin Command Identifier

Identifier / Programs / Linux and Unix

vipw

Edit the password file. tldr-pages

GTFOBins inherit 1 documented command

Opens the identifier with your command. It is read in your browser and sent nowhere.

How vipw is abused

documented by GTFOBins

inherit

Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for vipw.

1 documented command

from GTFOBins, each read by the identifier

inherit with sudo, as SUID

Despite requiring superuser privileges to run, the editor is executed as the unprivileged user.

vipw
Identify

The command the identifier reads trips no Sigma process-creation rule. This command is, with GTFOBins’ notes, from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for vipw. The identifier reads the line that runs vipw.

Everyday use

from tldr-pages, CC BY 4.0

Edit the password file

Display version

vipw --versionIdentify

None of the 2 examples the identifier reads matches GTFOBins abuse or trips a Sigma process-creation rule.

Other programs abused for inherit

apport-cli · apt · apt-get · aptitude · aws · bashbug · batcat · bee · bundle · bundler · busctl · busybox · byebug · cargo · cowsay · cowthink