CmdID

CmdID / Programs / Linux and Unix

ispell

Interactive spell checking. tldr-pages

GTFOBins shell 1 documented command

Opens CmdID with your command. It is read in your browser and sent nowhere.

How ispell is abused

documented by GTFOBins

shell

Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for ispell.

1 documented command

from GTFOBins, each read by CmdID

shell unprivileged, with sudo, as SUID

ispell /etc/hosts
!/bin/sh
Identify

As SUID:

ispell /etc/hosts
!/bin/sh -p

The command CmdID reads trips no Sigma process-creation rule. This command is from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for ispell. CmdID reads the line that runs ispell.

Everyday use

from tldr-pages, CC BY 4.0

Start an interactive session

ispellIdentify

Check for typos in the specified file and interactively apply suggestions

ispell path/to/fileIdentify

Display version

ispell -vIdentify

None of the 3 examples CmdID reads matches GTFOBins abuse or trips a Sigma process-creation rule.

Other programs abused for shell

aa-exec · agetty · ansible-playbook · ansible-test · aoss · apt · apt-get · arch-nspawn · asterisk · at · autoconf · autoheader · autoreconf · awk · borg · bpftrace