3 ms·
> Sure, people do occasionally make mistakes or bad decisions and introduce security vulnerabilities.. but that happens less often than you think. It's not exa
by vntok 3y ago
> Sure, people do occasionally make mistakes or bad decisions and introduce security vulnerabilities.. but that happens less often than you think.
It's not exactly expected that a local GIMP desktop install would provide reverse shell capability, yet here we are (https://gtfobins.github.io/gtfobins/gimp/ https://gtfobins.github.io/gtfobins/gimp/)
- mid-kid 3y agoWe get it, code execution leads to code execution. https://devblogs.microsoft.com/oldnewthing/20230103-00/?p=107635 https://devblogs.microsoft.com/oldnewthing/20230103-00/?p=10...
- theamk 3y agoGIMP desktop install provides python scripting. The reverse shell capability comes from reverse shell specified on command line. gimp is no more dangerous that any other scriptable app, like emacs, vs code, web browser, etc..