From 1e3b479c10c918557fd22bcf2635d8afbd9c8994 Mon Sep 17 00:00:00 2001 From: effectrenan Date: Sat, 13 Feb 2021 10:53:19 -0300 Subject: [PATCH] Command Injection - array --- lib/processes.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lib/processes.js b/lib/processes.js index 8221b47..eab162b 100644 --- a/lib/processes.js +++ b/lib/processes.js @@ -99,6 +99,11 @@ function services(srv, callback) { return new Promise((resolve) => { process.nextTick(() => { + if (typeof srv !== "string") { + if (callback) { callback([]); } + return resolve([]); + } + if (srv) { let srvString = ''; srvString.__proto__.toLowerCase = util.stringToLower; @@ -106,12 +111,14 @@ function services(srv, callback) { srvString.__proto__.trim = util.stringTrim; const s = util.sanitizeShellString(srv); + console.log(s) for (let i = 0; i <= 2000; i++) { if (!(s[i] === undefined)) { srvString = srvString + s[i]; } } + console.log(srvString) srvString = srvString.trim().toLowerCase().replace(/, /g, '|').replace(/,+/g, '|'); if (srvString === '') { srvString = '*';