Security

647 readers

5 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 1 year ago

MODERATORS

LinearArray

BatBadBut: You can't securely execute commands on Windows (flatt.tech)

submitted 6 months ago by [email protected] to c/security

15 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] onlinepersona 8 points 6 months ago (1 children)

CreateProcess spawns cmd.exe even when that isn't asked? I find that... a little insane.

Anti Commercial AI thingy

CC BY-NC-SA 4.0

[–] Lmaydev 5 points 6 months ago (1 children)

Seems like an ancient hack to allow bat files to be run via that function.

I expect windows is full of stuff like that.

[–] onlinepersona 3 points 6 months ago (1 children)

Yeah, backwards compatibility is good when it isn't a security issue.

Anti Commercial AI thingy

CC BY-NC-SA 4.0

Inserted with a keystroke running this script on linux with X11

#!/usr/bin/env nix-shell
#!nix-shell -i bash --packages xautomation xclip

sleep 0.2
(echo '

 spoiler Anti Commercial AI thingy
[CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/)

Inserted with a keystroke running this script on linux with X11
```bash'
cat "$0"
echo '```
:::') | xclip -selection clipboard
xte "keydown Control_L" "key V" "keyup Control_L"

:::

[–] [email protected] 4 points 6 months ago* (last edited 6 months ago) (1 children)

I can barely live with that licence thingy, but don't paste that tutorial into your comment ffs.

[–] onlinepersona -3 points 6 months ago* (last edited 6 months ago) (1 children)

I've gotten the question often enough about why and how. You don't have to open it 🤷

Anti Commercial AI thingy

CC BY-NC-SA 4.0

Inserted with a keystroke running this script on linux with X11

#!/usr/bin/env nix-shell
#!nix-shell -i bash --packages xautomation xclip

sleep 0.2
(echo '

 spoiler Anti Commercial AI thingy
[CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/)

Inserted with a keystroke running this script on linux with X11
```bash'
cat "$0"
echo '```
:::') | xclip -selection clipboard
xte "keydown Control_L" "key V" "keyup Control_L"

:::

[–] [email protected] 3 points 6 months ago (1 children)

Seems like my client doesn't show it as a drop-down I thought it was like the reddit spoiler that where the same size but blacked out. Sorry.

[–] onlinepersona 1 points 6 months ago

Bad client! Bad! *wags finger*