zlacker

[return to "Detecting the use of "curl | bash" server-side"]
1. michae+93[view] [source] 2018-07-29 02:46:39
>>rubyn0+(OP)
On the evading detection side, one other simple way to avoid this is to add sponge[0] between curl and bash in the pipeline, i.e. curl ... | sponge | bash. sponge consumes all input until EOF before outputting anything, stopping bash from executing a partially downloaded script.

[0] https://linux.die.net/man/1/sponge

◧◩
2. skunkw+G5[view] [source] 2018-07-29 03:37:14
>>michae+93
If you're on a Mac or a system that doesn't have sponge installed by default, use moreutils to install.

https://joeyh.name/code/moreutils/ https://rentes.github.io/unix/utilities/2015/07/27/moreutils...

[go to top]