“Bash-in-the-Box” UPDATE