bandit/examples/subprocess_shell.py

34 lines
948 B
Python

import subprocess
from subprocess import Popen as pop
def Popen(*args, **kwargs):
print('hi')
pop('/bin/gcc --version', shell=True)
Popen('/bin/gcc --version', shell=True)
subprocess.Popen('/bin/gcc --version', shell=True)
subprocess.Popen(['/bin/gcc', '--version'], shell=False)
subprocess.Popen(['/bin/gcc', '--version'])
subprocess.call(["/bin/ls",
"-l"
])
subprocess.call('/bin/ls -l', shell=True)
subprocess.check_call(['/bin/ls', '-l'], shell=False)
subprocess.check_call('/bin/ls -l', shell=True)
subprocess.check_output(['/bin/ls', '-l'])
subprocess.check_output('/bin/ls -l', shell=True)
subprocess.Popen('/bin/ls *', shell=True)
subprocess.Popen('/bin/ls %s' % ('something',), shell=True)
subprocess.Popen('/bin/ls {}'.format('something'), shell=True)
command = "/bin/ls" + unknown_function()
subprocess.Popen(command, shell=True)
subprocess.Popen('/bin/ls && cat /etc/passwd', shell=True)