make the use of `curl <url> | sh` more secure
Hi,
after reading these nice articles on the danger of the use of curl <url> | sh :
- http://blog.classicalcode.com/2012/11/curl-pipe-sh-exploit-proof-of-concept/
- http://www.djm.org.uk/protect-yourself-from-non-obvious-dangers-curl-url-pipe-sh/
check by yourself : http://pipe-to-sh-poc.herokuapp.com/
I've written this handy script that is more user friendly in every day use : https://gist.github.com/eviweb/7882632
Eric
Written by eviweb
Related protips
Have a fresh tip? Share with Coderwall community!
Post
Post a tip
Did you know?
Most application security programs still stop at the repository. The page a visitor loads can run third-party scripts that read the DOM, change a checkout, or steal a session after the deploy already looks clean.
Security insights from Cside
Sponsored by #native_company# — Learn More
#native_title#
#native_desc#