3 ms·
Shellshock comes to mind as a vulnerability class. It was so popular, it made it even into the Mr.Robot TV series. If I would describe the vulnerability series
by cookiengineer 4y ago
Shellshock comes to mind as a vulnerability class. It was so popular, it made it even into the Mr.Robot TV series.
If I would describe the vulnerability series, it is something like SQL injection but for services that run shell commands in the background.
The parsers of both CGI and shells were/are so broken that I would just never run any shell command on a web server in a non-manual manner.
[1] https://en.m.wikipedia.org/wiki/Shellshock_(software_bug) https://en.m.wikipedia.org/wiki/Shellshock_(software_bug)