lotp
lotp copied to clipboard
[LOTP] Add tar
Description of the LOTP tool
tar
is a common UNIX tool to create and extract tarballs.
zipslip
https://security.snyk.io/research/zip-slip-vulnerability
tools like tar
can, if used with dangerous flags leads to arbitrary file write outside the "sandbox", this requires using -P / --absolute-paths
(as documented here https://man.freebsd.org/cgi/man.cgi?tar(1)#SECURITY)