daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/file/bash/bash-scanner.yaml

49 lines
1.3 KiB
YAML
Raw Normal View History

Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
id: bash-scanner
info:
Update bash.yaml
2022-09-19 09:27:53 +00:00
name: Bash Scanner
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
author: ransomsec
severity: info
Update bash.yaml
2022-09-19 09:27:53 +00:00
description: Indicator for bash Dangerous Commands – You Should Never Execute on Linux
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
reference:
Update bash.yaml
2022-09-19 09:27:53 +00:00
- https://www.tecmint.com/10-most-dangerous-commands-you-should-never-execute-on-linux/
- https://phoenixnap.com/kb/dangerous-linux-terminal-commands
Update bash-scanner.yaml
2023-04-14 14:22:36 +00:00
tags: bash,file,shell,sh
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
file:
- extensions:
Update bash.yaml
2022-09-19 09:27:53 +00:00
- sh
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
extractors:
- type: regex
name: fork-bomb
regex:
- ":(){:|:&};:"
- type: regex
Dashboard Content Enhancements (#5497) Dashboard Content Enhancements
2022-09-29 13:38:41 +00:00
name: rm command found
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
regex:
- "rm -(f|r)"
- "rm -(fr|rf)"
- type: regex
name: code injection
regex:
- "/bin/(sh|bash) -"
- "eval"
- "echo -c"
- "/bin/(sh|bash) -c"
- "(sh|bash) -"
- "(sh|bash) -c"
- type: regex
name: file manipulation
regex:
- "cat /dev/null >"
- type: regex
Update bash.yaml
2022-09-19 09:27:53 +00:00
name: unknown filedownload
Bash Scanner! Idea behind this file, i downloaded a shell script from the internet, and i don't revive the source code of the file, and run it, but the file is contains `rm -rf .` command, after running the file, my all files are deleted in current directory. :-(
2022-09-14 10:36:58 +00:00
regex:
- '(wget|curl) (https?|ftp|file)://[-A-Za-z0-9\+&@#/%?=~_|!:,.;]*[-A-Za-z0-9\+&@#/%=~_|]\.[-A-Za-z0-9\+&@#/%?=~_|!:,.;]*[-A-Za-z0-9\+&@#/%=~_|]$'
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot:
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022100db6e5f84fe8da8728aa4f05dd83a5d033d062fe552a148d3cf2fd599277d1eaf022040d4296bef6df6b57b8381af30fc75730d9bf8103ce7d37bdcfbe91317fc5344:922c64590222798bb761d5b6d8e72950