adding dns-sync command injection thanks to @skx