github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-10-24 05:24:53 +00:00
Code Issues Projects Releases Wiki Activity
551 Commits 120 Branches 178 Tags
73fbbdb5774d2432f5c0c9d32a15691ac98d3e18
Commit Graph

2 Commits

Author SHA1 Message Date
Mark Stemm
73e52e1e91 Don't run the spawned program in a shell. 
Instead, run it directly. This avoids false positives when running
non-bash commands and false negatives when trying to run a shell.
 2016-10-24 15:56:45 -07:00
Mark Stemm
4a941df787 Example showing running bash via a bad rest api. 
Simple docker-compose environment that starts a simple express server
with a poorly-designed /api/exec/<cmd> endpoint that executes arbitrary
commands, and uses falco to detect running bash.
 2016-07-07 15:35:11 -07:00