orbisai0security 94c0fc2edd Hardening: explicitly set shell=False on all subprocess.run() calls in fm11rf08s_recovery.py. ...

All four call sites already pass `cmd` as a Python list, so Python's default of `shell=False` means there is no active command-injection risk. This change makes the security intent explicit, prevents accidental future regression if a call site is later changed to pass a string, and improves code clarity.

No functional behaviour is changed.

2026-06-02 17:12:31 +02:00

..

amiibo_change_uid.py

…

des_talk.py

…

findbits.py

…

fm11rf08s_full.py

…

fm11rf08s_recovery.py

Hardening: explicitly set shell=False on all subprocess.run() calls in fm11rf08s_recovery.py.

2026-06-02 17:12:31 +02:00

hf_mfu_uscuid.py

…

ice.py

…

intertic.py

…

mf_backdoor_dump.py

…

mfuev1_counter_reset.py

make style

2026-04-13 09:35:02 +02:00

mfulaes_mask_recovery.py

…

mfulc_counterfeit_recovery.py

mfulc_counterfeit_recovery: faster vuln check

2026-05-28 23:58:09 +02:00

ntag22x_libsuncmac.py

…

ntag22x_suncmac_recovery.py

…

parity.py

…

paxton_convert.py

…

paxton_net.py

…

paxton_switch.py

…

pm3_eml2mfd.py

…

pm3_eml_mfd_test.py

…

pm3_help2json.py

pm3_help2json.py: fix deprecation warning

2026-05-21 21:00:58 +02:00

pm3_help2list.py

…

pm3_mfd2eml.py

…

pm3_nfc2eml.py

…

pm3_resources.py

…

pm3.py

…

read_t-union.py

…

spi_flash_decode.py

…

theremin.py

…

xorcheck.py

…