You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the example bellow I linked a bash script with a symbolic link called file.pdf of which the pdf extension hides the real file type, this could be used to trick an unsuspecting victim if abused. the fix for this would likely be to follow the symlink to the pointed file and display it's real file type.
an alternative approach would be to use something like libmagic to identify all files by the file contents and use MAGIC_SYMLINK to follow the symlink with .extentions as fall back for unknown file types.
The text was updated successfully, but these errors were encountered:
ghost
changed the title
Follow Symbolic Link for Filetype
[Dolphin] Follow Symbolic Link for Filetype
Aug 7, 2022
In the example bellow I linked a bash script with a symbolic link called
file.pdf
of which the pdf extension hides the real file type, this could be used to trick an unsuspecting victim if abused. the fix for this would likely be to follow the symlink to the pointed file and display it's real file type.an alternative approach would be to use something like
libmagic
to identify all files by the file contents and useMAGIC_SYMLINK
to follow the symlink with .extentions as fall back for unknown file types.The text was updated successfully, but these errors were encountered: