Skip to content

Instantly share code, notes, and snippets.

@trepmal

trepmal/bad-script.sh

Last active December 10, 2016 04:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save trepmal/d089ae44585da20cbed308f8865e2b82 to your computer and use it in GitHub Desktop.
Save trepmal/d089ae44585da20cbed308f8865e2b82 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
bad-script.sh
#!/bin/bash
echo "mua hahah"
exit

# Uses an escape sequence to move the cursor up.
# So if you `cat` this file, it will hide the "bad" part
# But if you execute the file, the "bad" will be done.
# Try `cat -v` to expose the escape characters.
echo "gooooood file"
# http://www.openwall.com/lists/oss-security/2015/09/17/5
@trepmal
Copy link
Author

trepmal commented Dec 10, 2016

Note: GitHub doesn't display the full escape sequence, but it's there if you download it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment