News for hackers. Stuff that matters.

A comment on Deleting System32\curl.exe. Parent comment

Re:Deleting System32\curl.exe by tyingq on Monday April 24, 2023 @07:00AM (#35685997)
I noticed that "curl" in PowerShell is an alias, so you would have to deliberately say "curl.exe" to get System32\curl.exe

  C:\> alias curl

  CommandType     Name                                               Version    
  Source
  -----------     ----                                               -------    ------
  Alias           curl -> Invoke-WebRequest
[ Parent | on HN ]
Re:Deleting System32\curl.exe by justeleblanc on Monday April 24, 2023 @08:06AM (#35686591)
That's not the case in the latest versions of powershell.
[ Parent | on HN ]
Re:Deleting System32\curl.exe by VWWHFSfQ on Monday April 24, 2023 @09:32AM (#35687427)
Yeah they did the same thing with wget. Just absolutely bonkers
[ Parent | on HN ]
Re:Deleting System32\curl.exe by phpisthebest on Monday April 24, 2023 @09:49AM (#35687623)
That is for Windows Powershell, not Powershell (and yes Windows Powershell is different from PowerShell [1])

curl > curl.exe > C:\Windows\System32\curl.exe

[1] https://learn.microsoft.com/en-us/powershell/scripting/whats...

[ Parent | on HN ]
Re:Deleting System32\curl.exe by thomasjudge on Monday April 24, 2023 @11:22AM (#35688745)
This is so Microsoft
[ Parent | on HN ]