@[email protected] to [email protected]English • 1 year agoOld XKCD, still relevantlemmy.dbzer0.comimagemessage-square45fedilinkarrow-up1455arrow-down17file-text
arrow-up1448arrow-down1imageOld XKCD, still relevantlemmy.dbzer0.com@[email protected] to [email protected]English • 1 year agomessage-square45fedilinkfile-text
minus-square@[email protected]linkfedilinkEnglish12•1 year agoHow does it verify the command is valid? Does it run what I enter? If so, just give it an infinite loop followed by some attempt at a tar command: while true; do :; done; tar -xyz
minus-square@[email protected]linkfedilinkEnglish12•1 year agoBlue Team: “Okay everyone let’s make sure this is absolutely the correct input” Red Team: “Lmao lets try this 90mb list of bash command injection patterns”
How does it verify the command is valid? Does it run what I enter?
If so, just give it an infinite loop followed by some attempt at a tar command:
while true; do :; done; tar -xyzBlue Team: “Okay everyone let’s make sure this is absolutely the correct input”
Red Team: “Lmao lets try this 90mb list of bash command injection patterns”