Zsh Mailing List Archive
Messages sorted by:
Reverse Date
,
Date
,
Thread
,
Author
Arbitrary code execution in commands of Zsh shell.
X-seq
: zsh-workers 51863
From
: LitHack <lithack0@xxxxxxxxx>
To
: zsh-workers@xxxxxxx
Subject
: Arbitrary code execution in commands of Zsh shell.
Date
: Fri, 16 Jun 2023 17:58:54 +0530
Archived-at
: <https://zsh.org/workers/51863>
List-id
: <zsh-workers.zsh.org>
Found a bug by which we can run our command in any other commands.
Syntax:
{any command}>({our command})
Example:
unzip v.zip>(ls)......The command ls be executed.
Attachment:
IMG-20230616-WA0001.jpg
Description:
JPEG image
Follow-Ups
:
Re: Arbitrary code execution in commands of Zsh shell.
From:
Roman Perepelitsa
Messages sorted by:
Reverse Date
,
Date
,
Thread
,
Author