zlacker

[return to "Detecting the use of "curl | bash" server-side"]
1. ithkui+3j[view] [source] 2018-07-29 09:15:44
>>rubyn0+(OP)
I wish there was a standard way to check a checksum, so that download instructions could just include that in the snippet to copy paste.

I wrote a tool that could be used like that but it's useless if its not ubiquitous (https://github.com/mmikulicic/runck)

◧◩
2. pcl+qk[view] [source] 2018-07-29 09:50:28
>>ithkui+3j
I've got a similar python script in my collection of scripts:

    $ curl <url> | pipe-checksum <expected> | bash
https://gist.github.com/pcl/64bd2f56695fcf8e1fad51443aab1f1e
[go to top]