https://web.archive.org/web/20240423134349/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

https://lukespademan.com/blog/the-dangers-of-curlbash/

PSA: Detecting curl piped into a shell from the server's side is way easier than you think.

Reply to this note

Please Login to reply.

Discussion

It's a stupidly obvious attack vector in retrospect, and that alone should be enough to make you think