I think Unicode Emoji were a great step forward but we must redouble our efforts.
This is actually related to something I'm working on at the moment and it cleared up a few misconceptions. So thanks for the link :-)
git log -p --pickaxe-regex -S"$exp"
Spaces, tabs, and newlines can be used to alter code in invisible way.
for =1,5 do
Since we have two types of invisible characters, U+200e and U+200f, we can use those as binary digits -- 1 and 0. Thus, we can write a function that takes an invisible string as input, and returns a normal string as output.
So, what kind of string could we feed it? One possibility would be to convert something like "echo 'command-line injection'" into an invisible string. We'd pass that into our decoder function, and pass the result into os.execute. Since the conversion function mentioned above can be identified with an invisible variable name, it would look similar to this:
The final PoC could look similar to this:
_G["os"]["execute"]("echo 'command-line injection'")
Another interesting approach would be to iterate through the "os" table a fixed number of times, until reaching the "execute" key. The iteration order isn't guaranteed, but given a certain version of LuaJIT, I think it's stable. That means you'd be able to do the equivalent of "os.execute" while making it look like you're "counting to 5."
'I passed the Turing test. No one believed me. Honest.'
passes Turing test by sounding like a petulant child
Revision: I believe I misinterpreted the intention of your post, instead wanting to expose tricks like these. I'd be fine with this.
Why try to obfuscate programs in base64-encoded strings when you have it invisibly lying around in plain light.
In other words, the programs are quines if and only if they aren't.
Androids dream of quined Anguish.
You don't need to use define_method, it just makes it more obvious what's going on.
As a random example:
titan:~ geofft$ python3 -c "$(printf "\u2063") = 1"
File "<string>", line 1
SyntaxError: invalid character in identifier
And the BEL character, while non-spacing and invisible, is sometimes audible.
The language is just a cute transliteration of brainfuck to use invisible zero width characters.
Anyone who uses 'lede' correctly gets express treatment here...
is that a hint of weariness? :3