3 ms·
-DGAPING_SECURITY_HOLE is how you have to compile nc in order to enable "-e" support. The gaping security hole is that it is literally RCE-as-a-feature -- yes,
by cyphar 7y ago
-DGAPING_SECURITY_HOLE is how you have to compile nc in order to enable "-e" support. The gaping security hole is that it is literally RCE-as-a-feature -- yes, it's not as bad as "pass any text you get over this socket to a shell session" but it's still pretty bad.
- FDSGSG 7y agoThere is no security hole, -e isn't pretty bad.
- Bjartr 7y agoHe's not being facetious by saying -DGAPING_SECURITY_HOLE, that is literally the flag you need to set when compiling nc to use the -e flag. https://android.googlesource.com/platform/external/netcat/+/refs/tags/android-2.2.3_r1/netcat.c#570 https://android.googlesource.com/platform/external/netcat/+/...
- FDSGSG 7y agoI know that's the flag you need to set, but despite the name setting the flag does not introduce any kind of a security hole.