flawopen.com/command-injection/Python

इस पेज के मुख्य शब्द

Web Application Security

सुरक्षा अवधारणा (Web Application Security): Core architecture component affected by CWE-918.

CWE-918

सुरक्षा अवधारणा (CWE-918): Standard Common Weakness Enumeration classification for command-injection-python.

Defense-in-Depth

सुरक्षा अवधारणा (Defense-in-Depth): Multi-layered engineering verification and runtime boundary isolation.

हमले का चरण-दर-चरण प्रवाह

सोर्स कोड: कमज़ोर बनाम सुरक्षित कार्यान्वयन

# shell=True spawns /bin/sh to interpret the string
import subprocess

def ping_host(host):
    # Attacker input: "8.8.8.8; cat /etc/passwd"
    cmd = f"ping -c 1 {host}"
    return subprocess.run(cmd, shell=True, capture_output=True)

# shell=False (default): passes arguments directly to the binary
import subprocess

def ping_host(host):
    # host is treated strictly as a single argument to ping
    cmd = ["ping", "-c", "1", host]
    return subprocess.run(cmd, shell=False, capture_output=True, check=True)

इंजीनियरिंग और सिस्टम सुरक्षा चेकलिस्ट

• ✓अनुशंसित सुरक्षा नियम: Always pass command arguments as a list: ["executable", "arg1", "arg2"]।
• ✓सुनिश्चित करें कि shell=False (the default in subprocess)।
• ✓अनुशंसित सुरक्षा नियम: Completely eliminate calls to os.system() and os.popen()।

References

• CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• OWASP OS कमांड इंजेक्शन सुरक्षा चीट शीट