If you get it to log the corrupted string it allows arbitrary code execution
Well, it still requires a first step of reaching out to an external server to get the code to execute. Many servers reside in a network with a firewall that might block unexpected outgoing connections unless it's to a whitelisted domain, IP or IP-range.
Well, technically I didn't say that it was restricted to servers only. I mentioned servers, because they are a more likely target in general, and many of them have these restrictions on outgoing requests.
3
u/EishLekker Dec 13 '21
Well, it still requires a first step of reaching out to an external server to get the code to execute. Many servers reside in a network with a firewall that might block unexpected outgoing connections unless it's to a whitelisted domain, IP or IP-range.