BashBot is a BASH-based IRC bot project.
The BashBot project is a noteworthy IRC bot encrypted in BASH language, and is a fork of bbots authored by Dave Crouse. Upon testing it for a couple of days, I found it to be an excellent tool to experiment with bash. For comparison purposes, I would recommend this to anyone curious to know more about the software. However, it should not be used due to the potential security hole I discovered.
This issue arises when you expand a variable, which includes control characters such as `*` or `` ` ``. It leads to problems because the shell expands the variable as requested. By entering `!tell someone foo *`, for instance, the program would send a message to `PRIVMSG someone: foo` along with the list of files found in the current directory. This present serious hazard as using `rm -rf /` or similar commands can lead to far-reaching consequences. I believe this issue is of my making since it started after expanding the line when passing to the modules; doing this would mean having to do away with a considerable amount of coding.
This issue arises when you expand a variable, which includes control characters such as `*` or `` ` ``. It leads to problems because the shell expands the variable as requested. By entering `!tell someone foo *`, for instance, the program would send a message to `PRIVMSG someone: foo` along with the list of files found in the current directory. This present serious hazard as using `rm -rf /` or similar commands can lead to far-reaching consequences. I believe this issue is of my making since it started after expanding the line when passing to the modules; doing this would mean having to do away with a considerable amount of coding.
What's New