Post AbVWs8KeDaWFlw5d0C by khm@mastodon.sdf.org
(DIR) More posts by khm@mastodon.sdf.org
(DIR) Post #AbVWs8KeDaWFlw5d0C by khm@mastodon.sdf.org
2023-11-05T20:29:28Z
1 likes, 0 repeats
today I found software whose installation is curl | bash, where the curl command downloads a script with a /bin/sh header that runs ANOTHER curl | bash to fetch and execute ANOTHER /bin/sh script... all of which have error output suppressed and 'exit 0' hardcoded so you'll never know if something's wrongof course it's a web app that wants to masquerade as real software