Skip to content

alias can override existing command #60

@nil0x42

Description

@nil0x42

Steps to reproduce:

phpsploit(127.0.0.1) > alias exit INVALID
phpsploit(127.0.0.1) > exit
[-] Unknown Command: INVALID
phpsploit(127.0.0.1) > help exit

[*] exit: Quit current shell interface

SYNOPSIS:
    exit [--force]

OPTIONS:
    --force
        When called to leave the framework, this
        option forces exit, avoiding warning message
        if current session has not been saved to a file,
        or has changed since last save.

DESCRIPTION:
    If current phpsploit session is connected to $TARGET,
    this command disconnects the user from remote session.
    Otherwise, if the interface is not connected, this
    command leaves the phpsploit framework.

As you can see, the alias is created, and worse, help <COMMAND> still shows the help for original command instead of explicitly stating that it is now an alias.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions