3 ms·

To expand on this, it is possible to tell apart the redirection to file and pipe to shell. https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-serv

• DarkWiiPlayer 7y ago
  Sounds interesting and excessively comples; You can just as easily do this: - Send X bytes of the script - Send the line `curl my.server.com/asdjkfh` - Stop sending data, wait for a request to `/asdjkfh` - If you receive said request, start sending malicious data - If you don't, wait 5 seconds and continue sending a "fake" script