Lessons Learned
Bash Syntax for Code Execution
Although I have identified that the python script simpler.py has a vulnerability for code execution, I don't know how to execute commands as the script filters bad characters from the user input. I was not aware that there is a syntax that allows bash to execute commands or scripts on runtime. This technique seems to be useful when using Linux in general, not only limited for penetration testing.
Last updated