research!rsc: The xz attack shell script
More investigations on the xz bash attack script.
Syndicated from the fediverse. Read and engage on the original instance.
View original on lemmy.oneSyndicated from the fediverse. Read and engage on the original instance.
View original on lemmy.oneMore investigations on the xz bash attack script.
5 replies
Wow
I learned so much from this! Its funny I have been working on shell stuff.
https://github.com/dislux-hapfyl/pynksh
Oh man, your demo gives me Hudsucker Proxy vibes ("You know, for kids!"). I'm going to have to watch it a couple of times to understand what pnk is doing here. My initial take is pnk is a DSL of bash functions that appear to be composing together Tkinter "primitives."
An "APL" for UI. Interesting stuff.
Yes a DSL. And almost all of Python is hidden inside shell functions. I can make anything Python just writing in shell. I did make some high order functions for Tkinter so I can code faster and I used colors for quicker visual parsing and also removed worrying about indentation by classifying the function using capital letters and a tag for making the color block. Its simply me trying to write code more effectively. Abstracted away the boilerplate in a sense. Its dead simple really. I would love to tell you more.
Wow, this is some hardcore bash black magic.