Securing Internet-Critical Software: How We Could Have Backdoored Bash

Описание и применение

Статья рассматривает гипотетический сценарий внедрения бэкдора в Bash через платформу GNU Savannah.

Задача

The article discusses the potential for backdooring the Bash shell through the GNU Savannah infrastructure.

Результат

The story illustrates how critical software can be compromised if the hosting platform is not adequately secured.

Рабочий процесс

• Identify a vulnerable project on Savannah
• Exploit a build or dependency chain to inject malicious code
• Distribute the compromised Bash binary to users

Доказательства

The article discusses the potential for backdooring the Bash shell through the GNU Savannah infrastructure.

Источник