Command Injection Taxonomy for Code Review

Lab Python ping wrapper: subprocess shell=True vs argv list, dangerous call, the fix, ASAN-irrelevant crash on a C popen helper — no reverse shell.

September 5, 2020 · 7 min · 1293 words · Jose Adalberto Gutierrez Ochoa