Skip to content

Nmap flag injection via unsanitized target argument #1

@consigcody94

Description

@consigcody94

Found via code audit. cli/recon/engine.go:42 - User target from os.Args[1] passed to nmap. Target like --script-args=... injects flags. Fix: Validate against ^[a-zA-Z0-9._-]+$

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions