If an attacker can get a leading dash or slash into something that will be passed down to a command-line program, it might get misinterpreted as an option.

如果攻击者可以添加或修改某些以短横线或斜线开头的内容，并将其传递给命令行程序，那么这些内容就可能会被错误地当作选项进行处理。

youdao

> So is there a slash letter command for printf they could just like type you know what I mean?

>，所以这里有一个斜杠字母命令,来printf，他们可以像,【听不见的】你懂我的意思吗？

哈佛公开课 - 计算机科学课程节选

skittles So when you compile a program called A dot out, or skittles or wherever, and you double-click that program, or our in our command line environment, run it with dot slash skittles, that program is loaded Microsoft Word into memory just like Microsoft Word or whatever would be on your own computer.

当你编译一个程序a，out，或者,或其他的，你双击那个程序，或着在我们的命令环境中，采用，/skittles来运行它，那个程序被加载到,内存中，就像,或者你电脑上的其他程序。

哈佛公开课 - 计算机科学课程节选