in reply to Why is perl -MO=Deparse -f obf.txt unsafe?
Here is an example of why it is unsafe:
$ perl -MO=Deparse -ce 'BEGIN {print `date`}' Sat Feb 6 11:58:31 MST 2016 sub BEGIN { print `date`; } -e syntax OK
Run that one-liner, and we just executed a system command (date). We could just as easily have executed something malicious.
Dave
|
|---|