https://github.com/ctrlaltdev/rtlo-attack

☠️ Python script and example file to test the Right-To-Left Override attack
https://github.com/ctrlaltdev/rtlo-attack

attachments attack bash filename infosec python rlo rtlo security unicode

Last synced: 2 months ago
JSON representation

☠️ Python script and example file to test the Right-To-Left Override attack

• Host: GitHub
• URL: https://github.com/ctrlaltdev/rtlo-attack
• Owner: ctrlaltdev
• License: mpl-2.0
• Created: 2018-02-22T23:50:54.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2019-02-25T22:17:03.000Z (over 6 years ago)
• Last Synced: 2025-03-20T18:11:18.480Z (3 months ago)
• Topics: attachments, attack, bash, filename, infosec, python, rlo, rtlo, security, unicode
• Language: Python
• Homepage: https://ctrlalt.dev/RTLO
• Size: 15.6 KB
• Stars: 11
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
[![licence](https://img.shields.io/github/license/ctrlaltdev/RTLO-attack.svg?style=for-the-badge)](https://github.com/ctrlaltdev/RTLO-attack/blob/master/LICENSE)

![Python](https://img.shields.io/badge/_-Python-4B8BBE.svg?style=for-the-badge)

This is a really simple example on how to create a file with a unicode right to left ove

rride character used to disguise the real extention of the file.

In this example I disguise my .sh file as a .jpg file.

Of course, this example is harmless - and .sh won't launch from a file explorer in most

cases - but you get how it could be used...