{"id":3065,"date":"2022-12-09T17:16:00","date_gmt":"2022-12-09T16:16:00","guid":{"rendered":"https:\/\/ekiwi.de\/?p=3065"},"modified":"2022-12-09T17:16:11","modified_gmt":"2022-12-09T16:16:11","slug":"zip-slip-sicherheitsluecke-erstellen-einer-testdatei","status":"publish","type":"post","link":"https:\/\/ekiwi.de\/index.php\/3065\/zip-slip-sicherheitsluecke-erstellen-einer-testdatei\/","title":{"rendered":"Zip Slip Sicherheitsl\u00fccke: Erstellen einer Testdatei"},"content":{"rendered":"<p>Erstellen Sie eine Test-Zip-Datei f\u00fcr <a href=\"https:\/\/security.snyk.io\/research\/zip-slip-vulnerability\" target=\"_blank\" rel=\"noopener\">Zip-Slip<\/a>.<\/p>\n<p><!--Mehr--><\/p>\n<p>Zuerst legen wir einige Ordner und Unterordner an. Darin k\u00f6nnen wir nun unsere ZIP-Datei ablegen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/12\/zip_1.png\" alt=\"\" width=\"609\" height=\"160\" class=\"alignnone size-full wp-image-3066\" srcset=\"\/wp-content\/uploads\/2022\/12\/zip_1.png 609w, \/wp-content\/uploads\/2022\/12\/zip_1-300x79.png 300w\" sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/p>\n<p>Danach erstellen wir die b\u00f6se Datei, die wir in einem relativen Pfad in die ZIP-Datei einf\u00fcgen wollen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/12\/zip_2.png\" alt=\"\" width=\"782\" height=\"66\" class=\"alignnone size-full wp-image-3067\" srcset=\"\/wp-content\/uploads\/2022\/12\/zip_2.png 782w, \/wp-content\/uploads\/2022\/12\/zip_2-300x25.png 300w, \/wp-content\/uploads\/2022\/12\/zip_2-768x65.png 768w, \/wp-content\/uploads\/2022\/12\/zip_2-780x66.png 780w\" sizes=\"auto, (max-width: 782px) 100vw, 782px\" \/><\/p>\n<p>Jetzt k\u00f6nnen wir die Datei zum ZIP hinzuf\u00fcgen.<\/p>\n<pre>\r\nzip Projekt01.zip ..\/..\/..\/..\/..\/..\/..\/tmp\/evil.sh\r\n<\/pre>\n<p>Wenn wir die ZIP-Datei \u00f6ffnen, sehen wir den relativen Pfad, der zu unserer Datei f\u00fchren wird.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/12\/zip_3.png\" alt=\"\" width=\"559\" height=\"207\" class=\"alignnone size-full wp-image-3068\" srcset=\"\/wp-content\/uploads\/2022\/12\/zip_3.png 559w, \/wp-content\/uploads\/2022\/12\/zip_3-300x111.png 300w\" sizes=\"auto, (max-width: 559px) 100vw, 559px\" \/><\/p>\n<p>Die Windows-Edition:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/12\/zip_4.png\" alt=\"\" width=\"375\" height=\"172\" class=\"alignnone size-full wp-image-3069\" srcset=\"\/wp-content\/uploads\/2022\/12\/zip_4.png 375w, \/wp-content\/uploads\/2022\/12\/zip_4-300x138.png 300w\" sizes=\"auto, (max-width: 375px) 100vw, 375px\" \/><\/p>","protected":false},"excerpt":{"rendered":"<p>Erstellen Sie eine Test-Zip-Datei f\u00fcr Zip-Slip. Zuerst legen wir einige Ordner und Unterordner an. Darin k\u00f6nnen wir nun unsere ZIP-Datei<\/p>\n","protected":false},"author":1,"featured_media":2698,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[13],"tags":[144,132],"class_list":["post-3065","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-programmierung","tag-security","tag-sicherheit"],"_links":{"self":[{"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/posts\/3065","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/comments?post=3065"}],"version-history":[{"count":0,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/posts\/3065\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/media\/2698"}],"wp:attachment":[{"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/media?parent=3065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/categories?post=3065"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ekiwi.de\/index.php\/wp-json\/wp\/v2\/tags?post=3065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}