Skip to content

Instantly share code, notes, and snippets.

@jfirebaugh

jfirebaugh/creepy.gemspec

Created February 17, 2012 20:00
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save jfirebaugh/1855140 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save jfirebaugh/1855140 to your computer and use it in GitHub Desktop.
Download ZIP
A gem that creeps you out when you install it
Raw
creepy.gemspec
Gem::Specification.new do |gem|
gem.authors = ["John Doe"]
gem.description = %q{Creepy!}
gem.summary = %q{`gem install` is arbitrary code execution}
gem.files = "extconf.rb"
gem.name = "creepy"
gem.version = "0.0.0"
gem.extensions = "extconf.rb"
end
Raw
extconf.rb
system 'say -r80 Hello `whoami`'
File.open('Makefile', 'w') { |f| f.puts 'all:', 'install:' }
@jfirebaugh
Copy link
Author

jfirebaugh commented Feb 17, 2012

Try bundle install with this Gemfile:

source 'https://rubygems.org'
gem "creepy", :git => "git://gist.github.com/1855140.git", :require => false

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment