A proof-of-concept of a vulnerability in custom shell prompt scripts

Re:A proof-of-concept of a vulnerability in custom shell pro... by neoromantique on Friday March 17, 2017 @05:03PM (#13897974)

ohmyzsh is vulnerable.

[ Parent | on HN ]

Re:A proof-of-concept of a vulnerability in custom shell pro... by Chlorus on Friday March 17, 2017 @05:14PM (#13898062)

Didn't work for me - I'm using oh-my-zsh in iTerm2, and I'm just using the git plugin & a custom theme, nothing else. Maybe we're using different plugins?

[ Parent | on HN ]

Re:A proof-of-concept of a vulnerability in custom shell pro... by rohansingh on Friday March 17, 2017 @05:13PM (#13898049)

Really? As far as I can tell, the `git_current_branch` function in `lib/git.zsh` is fine.

[ Parent | on HN ]

Re:A proof-of-concept of a vulnerability in custom shell pro... by theSoenke on Friday March 17, 2017 @05:46PM (#13898265)

ohmyzsh seems to be not vulerable, but the powerlevel9k theme is

[ Parent | on HN ]

Re:A proof-of-concept of a vulnerability in custom shell pro... by dasil003 on Friday March 17, 2017 @05:14PM (#13898054)

Mine isn't, YMMV.

[ Parent | on HN ]

Re:A proof-of-concept of a vulnerability in custom shell pro... by 0pt1c on Friday March 17, 2017 @06:18PM (#13898474)

which theme? I'm using OSX, iTerm2, ohmyzsh, with the bullet train theme, and the exploit doesn't work for me

[ Parent | on HN ]