MightyPirates / OpenComputers

Home of the OpenComputers mod for Minecraft.

Home Page:https://oc.cil.li

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

vulnerability of the "serialization" library in openOS

igorkll opened this issue · comments

deserialization of such a string causes the computer to freeze for a couple of seconds: "{(function() while true do end end)()}"
since a closed loop increases energy consumption (as far as I understand from the documentation), you can send commands of this type to the robot to discharge its battery

ive tested this and it seems it can be used to attack some weak remote shell systems and other insecure systems using serialization lib