oh-my-git icon indicating copy to clipboard operation
oh-my-git copied to clipboard

Security problem with levels files

Open m0rp30 opened this issue 1 year ago • 0 comments

There are some security problems, if I add some code to the levels file it is executed without checking.

e.g., in the levels/intro/risky file if I add, under [setup], code like this touch /home/$(whoami)/payload.txt the code is executed unchecked.

I suggest taking a different approach to run the command

m0rp30 avatar Jun 24 '24 08:06 m0rp30