4 ms·
Wow that is a whole bunch of curling/execing bash scripts that curl/exec other bash scripts.
by VectorLock 3y ago
Wow that is a whole bunch of curling/execing bash scripts that curl/exec other bash scripts.
- secabeen 3y agoYeah, all done as blind execution of remote code. Bleh.
- oriettaxx 3y agoyes, but come on: you download it and quickly check yourself
- brirec 3y agoNot really that simple. All the scripts there curl|bash more scripts. If you want to audit the contents you’ll have to follow quite a few.
- oriettaxx 3y agoyes, I had a better look at not trivial ones, and you are all correct
- bkallus 3y agoAssuming that the script you download is the same as the script that curl|bash downloads. https://web.archive.org/web/20231128113854/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ https://web.archive.org/web/20231128113854/https://www.idont...
- Karunamon 3y agoA neat attack, but probably unrealistic in the context of those downloads being on github.
- VectorLock 3y agoIts not just one script that you're curling and execing. That scripts curls and execs some other scripts. And those others. You're pretty much auditing a whole codebase at that point, for better or worse.