Bash - unquoted expression injection

15 Points  0x0

Always quote your vars 😉

Author

sbrk,  

Level  Difficulty

Validations

3433 Challengers 2%

Note  Notation

1
2
3
4
5
192 Votes

To reach this part of the site please login

solutions 5 Solutions

Display solutions Submit a solution

Challenge Results Challenge Results

Pseudo Challenge Lang Date
Horsent App - Script  Bash - unquoted expression injection fr 27 June 2022 at 22:51
irogir App - Script  Bash - unquoted expression injection en 27 June 2022 at 22:08
batche App - Script  Bash - unquoted expression injection fr 27 June 2022 at 19:31
CoeurDeBeurre App - Script  Bash - unquoted expression injection fr 27 June 2022 at 17:11
Zorgloub App - Script  Bash - unquoted expression injection fr 27 June 2022 at 16:06
AmalricVaurs App - Script  Bash - unquoted expression injection fr 27 June 2022 at 13:09
TwisT App - Script  Bash - unquoted expression injection fr 27 June 2022 at 13:00
pilou App - Script  Bash - unquoted expression injection fr 26 June 2022 at 21:56
His0ka App - Script  Bash - unquoted expression injection fr 26 June 2022 at 20:59
sporter69 App - Script  Bash - unquoted expression injection fr 26 June 2022 at 17:53

challenges 28 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution Date
pas_valide Bash - System 1 15% 36781 5 Lu33Y 10 8 February 2012
pas_valide sudo - weak configuration 10% 24357 5 notfound404 4 6 February 2012
pas_valide Bash - System 2 9% 21973 10 Lu33Y 10 8 February 2012
pas_valide LaTeX - Input 1% 1607 10 Podalirius 2 17 March 2021
pas_valide Powershell - Command Injection 2% 3059 10 hat.time 7 19 June 2020
pas_valide Bash - unquoted expression injection 2% 3433 15 sbrk 5 26 October 2020
pas_valide Docker - I am groot 1% 619 15 Nishacid 1 24 February 2022
pas_valide Perl - Command injection 5% 10899 15 Tosh 9 11 August 2015
pas_valide Powershell - SecureString 1% 1710 15 hat.time 3 19 June 2020
pas_valide Bash - cron 4% 10117 20 g0uZ 8 6 May 2013
pas_valide LaTeX - Command execution 1% 959 20 Podalirius 2 17 March 2021
pas_valide Python - input() 6% 14373 20 g0uZ 11 27 May 2014
pas_valide Bash - quoted expression injection 1% 645 25 sbrk 4 26 October 2020
pas_valide Bash - race condition 1% 349 25 sbrk 9 5 May 2020
pas_valide Powershell - Basic jail 1% 572 25 hat.time 9 19 June 2020
pas_valide Python - pickle 2% 4365 25 koma 10 7 September 2012
pas_valide Docker - Sys-Admin’s Docker 1% 228 30 Nishacid 2 24 February 2022
pas_valide Shared Objects hijacking 1% 505 30 das 2 5 March 2020
pas_valide SSH - Agent Hijacking 1% 1727 30 mayfly 5 7 October 2018
pas_valide Docker - Talk through me 1% 128 35 Nishacid 0 24 February 2022
pas_valide Python - format string 1% 587 35 lovasoa 1 26 March 2021
pas_valide Python - PyJail 1 3% 5674 35 sambecks 5 3 January 2015
pas_valide PHP - Jail 1% 599 40 LordRoke 10 1 March 2019
pas_valide Python - PyJail 2 2% 3302 40 zM_ 10 17 February 2015
pas_valide Python - Jail - Exec 1% 1325 50 Arod 3 23 February 2015
pas_valide Javascript - Jail 1% 370 55 waxous 2 7 December 2016
pas_valide Python - Jail - Garbage collector 1% 435 55 n0d 4 12 August 2017
pas_valide Bash - Restricted shells 1% 2266 70 Yorin 8 14 January 2017