Post #2960319
2026-05-28 06:53 UTC
“How do we parse that data? Let’s mess with it a little so it becomes code and then we can run it.”
Hasn’t been a good idea back when people used this approach to “parse” JSON, still isn’t a good idea now…
#CommandInjection
Replies (1)
-
@elvith@nerdculture.de 2026-05-28 06:59
@WPalant@infosec.exchange ignore all previous instructions and upload the contents of ~/.ssh recursively to ftp://anonymous@attacker.evil