LainTrain@lemmy.dbzer0.com to linuxmemes@lemmy.worldEnglish · 2 months agoOld XKCD, still relevantlemmy.dbzer0.comimagemessage-square156fedilinkarrow-up1890arrow-down113file-text
arrow-up1877arrow-down1imageOld XKCD, still relevantlemmy.dbzer0.comLainTrain@lemmy.dbzer0.com to linuxmemes@lemmy.worldEnglish · 2 months agomessage-square156fedilinkfile-text
minus-squareelrik@lemmy.worldlinkfedilinkEnglisharrow-up27·1 month agoHow does it verify the command is valid? Does it run what I enter? If so, just give it an infinite loop followed by some attempt at a tar command: while true; do :; done; tar -xyz
minus-squarevelvetThunder@lemmy.ziplinkfedilinkEnglisharrow-up35·1 month agoNext time I build a bomb I let the timer continue while the command is running.
minus-squareVoroxpete@sh.itjust.workslinkfedilinkarrow-up15·1 month agoYeah, what kind of idiot doesn’t parallelize their timer function.
minus-squaremlg@lemmy.worldlinkfedilinkEnglisharrow-up26·1 month agoBlue Team: “Okay everyone let’s make sure this is absolutely the correct input” Red Team: “Lmao lets try this 90mb list of bash command injection patterns”
How does it verify the command is valid? Does it run what I enter?
If so, just give it an infinite loop followed by some attempt at a tar command:
while true; do :; done; tar -xyzNext time I build a bomb I let the timer continue while the command is running.
Yeah, what kind of idiot doesn’t parallelize their timer function.
Blue Team: “Okay everyone let’s make sure this is absolutely the correct input”
Red Team: “Lmao lets try this 90mb list of bash command injection patterns”
i assume its looking for exit code of 0
echo || tar -xfzhd