3 ms·
Nice exploit. I think it can be prevented by `tee`ing bash : $ curl -s https://localhost:5555/setup.bash https://localhost:5555/setup.bash | tee bash sleep 3
by jchiu1106 11y ago
Nice exploit.
I think it can be prevented by `tee`ing bash :
$ curl -s https://localhost:5555/setup.bash https://localhost:5555/setup.bash | tee bash
sleep 3
echo "Hello there :)"
- cyphar 11y agoI think you'll still hit the buffer of tee in that case, which may still cause the problem. I'd recommend just saving the file and executing it afterwards.