Researchers disclose a 55-year-old vulnerability affecting macOS, Windows and Linux. Exploitation is trivial and requires no special tools. No patch exists.
I’m taking some admin/security courses and powershell was touted as “it’s so easy to make your own scripts to save time!”. I was just like, “the fuck Koolaid are you drinking?”
Phew! Just got done patching all my servers. The main IOCs are
So zsh is good? /s
According to the report, zsh is even worse
nushell, ash, elvish, dash, powershell, …
powershell is good because no hacker can be bothered typing that much to get anything to work ;)
Security by utter absence of usability
They have aliases for multiple commands (such as
cd,ls,curl, likelycat), so I’d still be careful 😬I’m taking some admin/security courses and powershell was touted as “it’s so easy to make your own scripts to save time!”. I was just like, “the fuck Koolaid are you drinking?”
pwsh
Was the command separated by dashes or case change? Let me che…ange to something else.