Skip to content

Instantly share code, notes, and snippets.

@mhseiden

mhseiden/gist:4027452

Created November 6, 2012 20:52
Show Gist options
  • Save mhseiden/4027452 to your computer and use it in GitHub Desktop.
Save mhseiden/4027452 to your computer and use it in GitHub Desktop.
Download ZIP
Simple Shell Injection
Raw
gistfile1.sh
# Not an immediate vector
touch ‘safe_file.txt$(echo “Shell Injection” > safe_file.txt)’
# Quite unsafe
touch “bad_file.txt$(echo “Shell Injection” > bad_file.txt)”
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment