News for hackers. Stuff that matters.

A comment on Detecting the use of “curl – bash” server side. Parent comment

Re:Detecting the use of “curl – bash” server side by NDizzle on Wednesday April 20, 2016 @11:19AM (#11535050)
Every time I see that I just wget the script and inspect it. If it does anything too clever, I don't install it that way. If I can't reason about the shell script something is wrong.

It's like being emailed a .bat file in 1999. Would you blindly run it on your Windows box?! I hope not!

[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by tamana on Thursday April 21, 2016 @12:37AM (#11539728)
The script downloads a binary onto your system. How would you inspect that?
[ Parent | on HN ]