Skip to content
a small bash jail bypass - combine env variables to call any command with only 11 chars (no alphanum)
Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README.md
bashfuck_linux.py
bashfuck_macos.py
sc_bf1.png
sc_bf2.png

README.md

bashfuck

a small bash jail bypass - combine env variables to call any command with only 11 chars (no alphanum)

Bash is a very powerful shellscript-interpreter.

It has many environment variables. And we can do basic operator (+,-,*,/, concat, substr, ...) with variables.

So I just made a little fun to execute command without using alphanum characters.

There are 2 files that worked on macos and linux (ubuntu - in my case)

Change your command in source code (COMMAND = '-----')

Screenshot 1 alt tag

Screenshot 2 alt tag

Have fun ^^!

You can’t perform that action at this time.