> You can download it to somewhere Obviously, but the howto in the readme does lay the groundwork for a huge security concern if some admins start to run it re

> You can download it to somewhere Obviously, but the howto in the readme does lay the groundwork for a huge security concern if some admins start to run it recurrently in that way, without reading the code every time. > The tool is marketed as fileless. Which is great if your purpose is indeed to use it for hacking, and you run it on machines that you've already compromised, not on your own. For anyone else, I think it's vital to only run it from an instance where you can download it and examine the code every time there is a change. I would do a git pull for that, not a curl command. Git makes it easier to go through all changes every time you do a pull.