[feature] Implement sys.getEnv()
function to return local environment variables
#259
Labels
feature
New feature or request
Is your feature request related to a problem? Please describe.
Production systems often expose secrets, or the location of secrets as environment variables. Viewing these variables is useful for identifying the system we're executing on, or for locating secrets for priv esc.
Describe the solution you'd like
A functions like
sys.getEnv()
that returns a dict of keys -> values of env vars:Describe alternatives you've considered
We could rely on
sys.exec
executingenv
or similar, though this would make our actions more visible in a process tree.(Right? Plz correct me here if wrong)
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: