.. / gcore

It can be used to generate core dumps of running processes. Such files often contains sensitive information such as open files content, cryptographic keys, passwords, etc. This command produces a binary file named core.$PID, that is then often filtered with strings to narrow down relevant information.

file-read

从文件中读取数据。

```
gcore $PID
```

sudo

如果二进制文件被 sudo 允许以超级用户身份运行，可能被用于访问文件系统、提升或维持特权访问。

```
sudo gcore $PID
```

suid

suid是一种授予文件的权限类型，它允许用户使用者以文件所有者的权限来执行文件。

```
./gcore $PID
```