2 ms·
You should not trust the server. The server may have been compromised.
by willvarfar 8y ago
You should not trust the server. The server may have been compromised.
- pbhjpbhj 8y agoThe client may have also been compromised, you may have, you might be in the Truman show ... /s If I'm reading the OP right, whilst directory permissions can be modified, traversal is not possible, so it can't overwrite outside the directory you're writing to. But if you wrote to your home directly then your .bashrc could be modified ... and it sounds like other vulnerabilities allow the actual processing to be hidden (spoofed console output). Seems like the sort of thing that could be used in a spear-fishing scenario. I wonder if you could write a StackExchange answer with instructions to scp files from such-and-such server ...