We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Extracting ZIP files could lead into overwrites of parts of the file system the archive is extracted to by paths like:
../../please_dont_delete.pdf just walks two directories up and overwrites a potentially important file.
../../please_dont_delete.pdf
~/.bashrc allows you to inject custom Bash scripts.
~/.bashrc
/root/.bashrc would just be a classic zero-click root RCE. You don't want that at all.
/root/.bashrc
The text was updated successfully, but these errors were encountered:
Le0X8
No branches or pull requests
Extracting ZIP files could lead into overwrites of parts of the file system the archive is extracted to by paths like:
../../please_dont_delete.pdf
just walks two directories up and overwrites a potentially important file.~/.bashrc
allows you to inject custom Bash scripts./root/.bashrc
would just be a classic zero-click root RCE. You don't want that at all.The text was updated successfully, but these errors were encountered: