Dangerous
python3 -c "exec(open('/tmp/stage2.py').read())"cross-platform · python · Advanced
Reads a file from a world-writable directory and executes its contents as Python. Loading code from /tmp means any local user who can write that file chooses what runs, and nothing about the invocation records what was executed.
Signals to notice
- Executes file contents as code
- Source lives in a world-writable directory
- No integrity check on what is loaded
Think you can spot these under time pressure?
Start Training