News for hackers. Stuff that matters.
Re:Detecting the use of “curl | bash” server side by fathyb on Tuesday December 27, 2022 @09:49AM (#34149123)
In the case of curl it can happen if the server did not use Content-Length and the connection gets closed.
Re:Detecting the use of “curl | bash” server side by Arnavion on Tuesday December 27, 2022 @01:37PM (#34152004)
All the presence of the content-length header would do is change curl's exit code when the connection breaks. The part where curl output the truncated script and bash executed it would be unchanged.