> For the complete documentation index, see [llms.txt](https://csbygb.gitbook.io/pentips/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://csbygb.gitbook.io/pentips/linux/privesc/wildcard.md).

# Wildcard Abuse

A wildcard character can be used as a replacement for other characters and are interpreted by the shell before other actions. Examples of wild cards include:

| Character | Significance                                                                                                                                          |
| --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| `*`       | An asterisk that can match any number of characters in a file name.                                                                                   |
| `?`       | Matches a single character.                                                                                                                           |
| `[ ]`     | Brackets enclose characters and can match any single one at the defined position.                                                                     |
| `~`       | A tilde at the beginning expands to the name of the user home directory or can have another username appended to refer to that user's home directory. |
| `-`       | A hyphen within brackets will denote a range of characters.                                                                                           |

* See [here](/pentips/linux/privesc/cron.md#cron-wildcards) and [here](https://github.com/CSbyGB/gitbook/blob/main/linux/writeups/THM-CMesS.md) for examples of wildcard abuse