MightyPirates / OpenComputers

Home of the OpenComputers mod for Minecraft.
https://oc.cil.li
Other
1.59k stars 431 forks source link

vulnerability of the "serialization" library in openOS #3655

Open igorkll opened 1 year ago

igorkll commented 1 year ago

deserialization of such a string causes the computer to freeze for a couple of seconds: "{(function() while true do end end)()}" since a closed loop increases energy consumption (as far as I understand from the documentation), you can send commands of this type to the robot to discharge its battery

finnaminope commented 11 months ago

ive tested this and it seems it can be used to attack some weak remote shell systems and other insecure systems using serialization lib