exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view