Perl injection
!/usr/bin/perl -w
use re ‘eval’; #this evil command enables it!
$a = “bla”;
$user_input = “(?{print “we’re executing this code
\n”;})”;
$a =~ /$user_input/;
!/usr/bin/perl -w
@files=ls $ARGV[0];
print “file list: @files\n”;
use re ‘eval’; #this evil command enables it!
$a = “bla”;
$user_input = “(?{print “we’re executing this code
\n”;})”;
$a =~ /$user_input/;
@files=ls $ARGV[0];
print “file list: @files\n”;
March 11th, 2009 at 4:36 am
lol