From 2f71273320dc08e8e961514787c5c4440e2e3b61 Mon Sep 17 00:00:00 2001
From: skyper <5938498+SkyperTHC@users.noreply.github.com>
Date: Mon, 5 Feb 2024 17:13:22 +0000
Subject: [PATCH] Update README.md

---
 README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/README.md b/README.md
index 83cda57..72edae5 100644
--- a/README.md
+++ b/README.md
@@ -81,6 +81,7 @@ Got tricks? Join us on Telegram: [https://t.me/thcorg](https://t.me/thcorg)
    1. [Clean logfile](#shell-clean-logs)
    1. [Hide files from a User without root privileges](#shell-hide-files)
    1. [Make a file immutable](#perm-files)
+   1. [Change user without sudo/su]
 1. [Crypto](#crypto)
    1. [Generate quick random Password](#gen-password)
    1. [Linux transportable encrypted filesystems](#crypto-filesystem)
@@ -1711,6 +1712,16 @@ touch /var/www/cgi/blah.cgi
 mount -o bind,ro /boot/backdoor.cgi /var/www/cgi/blah.cgi
 ```
 
+**8.vi. Change user without sudo/su**
+
+Needed for taking screenshots of X11 sessions (aka `xwd -root -display :0 | convert - jpg:screenshot.jpg`)
+```bash
+U=$(id -u UserName) ### <-- Set UserName
+H="$(grep "$U" /etc/passwd | cut -d: -f6)"
+HOME="${H:-/tmp}" python3 -c "import os;os.setuid(${U:?});os.execl('/bin/bash', '-bash')"
+# change -bash to bash to not make this a login shell.
+```
+
 ---
 <a id="crypto"></a>
 ## 9. Crypto