Zsh Mailing List Archive Messages sorted by: Reverse Date, Date, Thread, Author

Re: Arbitrary code execution in commands of Zsh shell.

X-seq: zsh-workers 51864
From: Roman Perepelitsa <roman.perepelitsa@xxxxxxxxx>
To: LitHack <lithack0@xxxxxxxxx>
Cc: zsh-workers@xxxxxxx
Subject: Re: Arbitrary code execution in commands of Zsh shell.
Date: Fri, 16 Jun 2023 14:52:10 +0200
Archived-at: <https://zsh.org/workers/51864>
In-reply-to: <CADc_fS32AA5PHGv0NFmbQYDgQ9i=W-fL_6PnomfJz16+kOQEcw@mail.gmail.com>
List-id: <zsh-workers.zsh.org>
References: <CADc_fS32AA5PHGv0NFmbQYDgQ9i=W-fL_6PnomfJz16+kOQEcw@mail.gmail.com>

On Fri, 16 Jun 2023 at 14:29, LitHack <lithack0@xxxxxxxxx> wrote:

Found a bug by which we can run our command in any other commands.

Syntax:
{any command}>({our command})

Example:
unzip v.zip>(ls)......The command ls be executed.

This feature (not a bug) is called Process Substitution. See

https://zsh.sourceforge.io/Doc/Release/Expansion.html#Process-Substitution.

Roman.

References:
- Arbitrary code execution in commands of Zsh shell.
  - From: LitHack

Messages sorted by: Reverse Date, Date, Thread, Author