From 03f1536048bfc3cfeacdeef72f106077396adc11 Mon Sep 17 00:00:00 2001 From: Raphael Date: Fri, 31 Jan 2025 18:05:35 -0800 Subject: [PATCH 1/2] Create asdasd.py --- asdasd.py | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 asdasd.py diff --git a/asdasd.py b/asdasd.py new file mode 100644 index 000000000..488392afa --- /dev/null +++ b/asdasd.py @@ -0,0 +1,4 @@ +import os + +# blah +os.system(input("whoami")) From ca8e1e4cc65f241f0702f2236fb660ec0ea7043d Mon Sep 17 00:00:00 2001 From: ZeroPath Date: Sat, 1 Feb 2025 02:06:11 +0000 Subject: [PATCH 2/2] docs: Add comments to explain code functionality and security risks --- asdasd.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/asdasd.py b/asdasd.py index 488392afa..08e33db56 100644 --- a/asdasd.py +++ b/asdasd.py @@ -1,4 +1,6 @@ import os -# blah +# WARNING: Security Risk - This code executes arbitrary system commands from user input +# This could allow malicious users to run dangerous commands on your system +# Purpose: Takes user input and executes it as a system command using the whoami utility os.system(input("whoami"))