Bash - unquoted expression injection

15 Points  0x0

Always quote your vars 😉

Author

sbrk,  

Level  Difficulty

Validations

7261 Challengers 2%

Note  Notation

1
2
3
4
5
305 Votes

To reach this part of the site please login

solutions 5 Solutions

Display solutions Submit a solution
You should validate this challenge first

Challenge Results Challenge Results

Pseudo Challenge Lang Date
PanDoxRafal App - Script  Bash - unquoted expression injection fr 16 May 2025 at 09:13
RDg App - Script  Bash - unquoted expression injection fr 16 May 2025 at 03:50
Pokiae App - Script  Bash - unquoted expression injection fr 14 May 2025 at 23:42
PeMa App - Script  Bash - unquoted expression injection en 14 May 2025 at 20:53
Antoine App - Script  Bash - unquoted expression injection fr 14 May 2025 at 00:15
DanChPiNum App - Script  Bash - unquoted expression injection ru 13 May 2025 at 22:57
D3adINsid3 App - Script  Bash - unquoted expression injection fr 12 May 2025 at 12:05
Iceish App - Script  Bash - unquoted expression injection fr 12 May 2025 at 11:48
Ares App - Script  Bash - unquoted expression injection fr 11 May 2025 at 23:13
FuryFR App - Script  Bash - unquoted expression injection fr 11 May 2025 at 12:23

challenges 33 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author ↓↑ Note  Notation Solution Date
pas_valide Bash - cron 4% 12696 20 g0uZ 8 6 May 2013
pas_valide Python - input() 6% 18913 20 g0uZ 11 27 May 2014
pas_valide Bash - System 1 15% 51668 5 Lu33Y 10 8 February 2012
pas_valide Bash - System 2 9% 30143 10 Lu33Y 10 8 February 2012
pas_valide Perl - Command injection 4% 13554 15 Tosh 10 11 August 2015
pas_valide Python - Jail - Exec 1% 1835 50 Arod 3 23 February 2015
pas_valide Python - pickle 2% 5540 25 koma 10 7 September 2012
pas_valide Python - PyJail 1 2% 7171 35 sambecks 5 3 January 2015
pas_valide sudo - weak configuration 10% 34222 5 notfound404 5 6 February 2012
pas_valide Python - PyJail 2 2% 4420 40 zM_ 10 17 February 2015
pas_valide Javascript - Jail 1% 482 55 waxous 4 7 December 2016
pas_valide Deep learning - Malicious model 1% 28 70 blackndoor 0 26 July 2024
pas_valide Bash - Restricted shells 1% 3119 60 Yorin 9 14 January 2017
pas_valide Python - Jail - Garbage collector 1% 603 55 n0d 5 12 August 2017
pas_valide PHP - Jail 1% 822 40 LordRoke 10 1 March 2019
pas_valide Shared Objects hijacking 1% 890 30 das 2 5 March 2020
pas_valide SSH - Agent Hijacking 1% 2323 30 mayfly 5 7 October 2018
pas_valide Bash - quoted expression injection 1% 1756 30 sbrk 6 26 October 2020
pas_valide Bash - race condition 1% 588 35 sbrk 10 5 May 2020
pas_valide Bash - unquoted expression injection 2% 7261 15 sbrk 5 26 October 2020
pas_valide Python - Eval Is Evil 1% 127 60 Mister7F 1 28 December 2023
pas_valide AppArmor - Jail Medium 1% 181 35 nivram 1 25 September 2023
pas_valide AppArmor - Jail Introduction 1% 695 15 nivram 4 10 May 2023
pas_valide Powershell - Command Injection 2% 6942 10 hat.time 7 19 June 2020
pas_valide Powershell - Basic jail 1% 1347 25 hat.time 10 19 June 2020
pas_valide Powershell - SecureString 1% 3528 15 hat.time 4 19 June 2020
pas_valide R: Code Execution 1% 1089 20 Fey 7 25 September 2023
pas_valide Docker - Talk through me 1% 785 35 Nishacid 2 24 February 2022
pas_valide Docker - Sys-Admin’s Docker 1% 1122 30 Nishacid 3 24 February 2022
pas_valide Docker - I am groot 1% 3041 15 Nishacid 2 24 February 2022
pas_valide Python - format string 1% 1280 35 lovasoa 1 26 March 2021
pas_valide LaTeX - Input 2% 4934 10 Podalirius , Mhd_Root 5 17 March 2021
pas_valide LaTeX - Command execution 1% 2256 20 Podalirius , Mhd_Root 3 17 March 2021