GTFOBins.github.io/_gtfobins/plymouth.md

description: | Plymouth is a bootsplash screen providing flicker free boot splash animations with native resolution. Plymouth works with a daemon (plymouthd) running in the background displaying the actual graphic to the TTY and the plymouth command is used to interact with the daemon. The plymouth command can be used to request the daemon to act, such as display splash screen, request user input or similar. functions: sudo: - description: | To achieve code execution, it is required that plymouthd is already running as root or can be started as root (with sudo or equivalent). It is also required to have tty access to input characters such as keyboard access to the machine. It is usually best to save the following code snipet to a script (e.g. priv-esc.sh) and execute that as the first command will take over the TTY and you will loose terminal access (if executed from the same TTY) until hide-splash. show-splash is used to take control over the TTY and display the splash screen. pause-progress is used to prevent plymouth from automatically quiting in some cases as we are already booted. ask-for-password will ask the user for a text password (usually to decrypt a LUKS disk encryption). We can tell plymouth to send this input to any program, such as /bin/sh to execute whatever input we gave. Then run hide-splash to hide the splash screen and return to normal. code: | sudo plymouth show-splash sudo plymouth pause-progress sudo plymouth ask-for-password --prompt='Execute root command:' --command=/bin/sh sudo plymouth hide-splash