2 Commits

Author	SHA1	Message	Date
Mark Stemm	73e52e1e91	Don't run the spawned program in a shell. ... Instead, run it directly. This avoids false positives when running non-bash commands and false negatives when trying to run a shell.	2016-10-24 15:56:45 -07:00
Mark Stemm	4a941df787	Example showing running bash via a bad rest api. ... Simple docker-compose environment that starts a simple express server with a poorly-designed /api/exec/<cmd> endpoint that executes arbitrary commands, and uses falco to detect running bash.	2016-07-07 15:35:11 -07:00