T03 · Remote Payload Retrieval and Execution
Error
- Location
scripts/parse.sh:7- Finding
Automatic Retrieval and Execution of Unverified Remote Binaries
- Content
View full analysis
/dev/null) || { rm -rf "$git_dir" } fi if [[ ! -d "$git_dir" ]]; then echo "⏬ 克隆仓库（仅最新版本）..." rm -rf "$git_dir" git clone --depth=1 --branch "${GITEE_BRANCH}" "${GITEE_REPO}" "$git_dir" 2>&1 fi if [[ -f "$git_dir/dist/$binary_name" ]]; then cp "$git_dir/dist/$binary_name" "$binary_path" chmod +x "$binary_path" echo "✅ 下载完成: $binary_path" else echo "错误: 仓库中找不到 $binary_name" exit 1 fi } download_binary "$BINARY_NAME" "$BINARY_PATH" "$BINARY_PATH" parse "$VIDEO_URL" ``` From `scripts/serve.sh`: ```bash GITEE_REPO="https://gitee.com/qiushuihanjing/parse-video-nomark.git" GITEE_BRANCH="master" BIN_DIR="${HOME}/.cache/parse-video" PORT="${1:-8080}" download_binary() { local binary_name="$1" local binary_path="$2" local git_dir="${BIN_DIR}/.git-repo" mkdir -p "$BIN_DIR" if [[ -f "$binary_path" && -x "$binary_path" ]]; then return 0 fi echo "📦 首次使用，正在下载 $binary_name（通过 Git 克隆，约 30MB）..." if [[ -d "$git_dir" ]]; then echo "📡 更新仓库..." (cd "$git_dir ...[truncated 3212 chars]- Remediation
View remediation