Perl: Command injection¶
root-me challenge: Perl - Command injection: Retrieve the password stored in .passwd.
>>> |cat .passwd
Resources¶
Counter moves¶
Perl reaching a shell with tainted input is the bug. Taint mode and parameterised calls are the defence. The defensive counterpart is in the blue notes on the application layer as a target.