nicklem1 commented on commit e32ee549 at troubleshoot-codacy / backend

nicklem1
2023-07-25T08:58:03Z

⚠️ Codacy found a medium Code Style issue: [no-consecutive-blank-lines] Remove 1 line before node

### Command Injection Lab 1

The user on accessing the lab is provided with a feature to perform a name server lookup on the given domain. The user has to give a domain name and the server would perform a ns lookup and return back to the client. If the user is running the lab, based on the OS he can select Windows or Linux.

The user can cause the server to execute commands, because of the lack of input validation.

The user can give a domain say `google.com && [any cmd]` or `google.com; [any cmd]`

If the OS is windows, lets give input as `google.com && ipconfig` and choose windows.

If the OS is linux (Ubuntu, Kali, etc), lets give input as `google.com && ifconfig` and choose linux.

---

*This comment was generated by an experimental AI tool.*