Skip to content

Latest commit

 

History

History
49 lines (33 loc) · 1.27 KB

README.md

File metadata and controls

49 lines (33 loc) · 1.27 KB
Raw

pandora-shar

Encrypted Unix shell archives that could contain anything...

Idea is to make a "shell archive" (shar) that requires the right password to run. Of course you don't know what it might do, since you don't have the password.

It's mostly just a "here document", base64 and such, but they are a little hard to construct, and would be nice if they are portable.

Technically, they don't have to be archives, it's just an encrypted shell script, but they remind me of shar files.

Usage

  • Create your file for the guts to be done
  • Test that like a normal shell script
  • Edit the Makefile here
  • Run make and provide the password
  • Test result and iterate
  • (optional) Destroy your copy of the contents
  • Distribute the resulting file.
  • Profit?

Notes

  • You may want to pad your contents to make them longer (add comments)
  • Using Openssl here only because it's widespread.

Dedication

This code is dedicated to everyone who is willing to pipe the output of curl directly into bash. May your data rest in peace.

Example

This example can be executed using the password: test

#! /bin/sh
openssl aes-256-ecb -d -a <<^^ | sh
U2FsdGVkX18IajCjSpqV6bAyPls1j/3oHFiRueWVVP6shuAu/hOQ5ndX2EbLwfmN
IHZfIOL0RaL3qXfFH6sejG1iVpXDCdcjdMzMtNMFilyMWNZ9V0kWRXKx3prk9PQJ
^^