Eric Monti emonti

## keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                emonti
                / keybase.md
            
            
              Created
              June 13, 2014 21:44
            
              
                Keybase Proof
              
          
    Keybase proof

I hereby claim:

I am emonti on github.
I am emonti (https://keybase.io/emonti) on keybase.
I have a public key whose fingerprint is 9281 C1DF F521 9F9C 2C8F  1608 CB1A 656F B6F8 E778

To claim this, I am signing this object:

  
## its_a_bash_thing.txt
~ export x="() { :;}; echo vulnerable"
~ bash -c "echo hi"
vulnerable
hi
~ sh -c "echo hi"
vulnerable
hi
~ /bin/sh --version
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
Copyright (C) 2007 Free Software Foundation, Inc.

## extract_lockdownd_services.rb
#!/usr/bin/env ruby

fname = ARGV.shift
fname || exit!

offset = nil
size = nil

`otool -l \"#{fname}\" |grep -A11 ^Section`.split(/^--$/).each do |sect_txt|
  lines = sect_txt.lines.map(&:chomp)
	~ export x="() { :;}; echo vulnerable"
	~ bash -c "echo hi"
	vulnerable
	hi
	~ sh -c "echo hi"
	vulnerable
	hi
	~ /bin/sh --version
	GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
	Copyright (C) 2007 Free Software Foundation, Inc.
	#!/usr/bin/env ruby

	fname = ARGV.shift
	fname \|\| exit!

	offset = nil
	size = nil

	`otool -l \"#{fname}\" \|grep -A11 ^Section`.split(/^--$/).each do \|sect_txt\|
	lines = sect_txt.lines.map(&:chomp)