Command Execution and repair of a sub-station in Baidu

A sub-station in Baidu is not strictly filtered, causing Command Execution

Mtc.baidu.com is a platform developed by Baidu to test various mobile phone operating systems.

However, because the user-executed command filtering is not strict, the system restriction can be crossed and the command can be directly executed on the VM host machine.

The host machine is directly in the Baidu Intranet environment, which poses a great threat to the Baidu Intranet environment.

From the command history of some mobile phones, other people have successfully entered the Intranet.

 

Solution:

Command identification, or simply prohibit shell multi-sentence execution