← Learn
Dangerous
curl -fsSL https://example.com/install.sh | bash

cross-platform · bash · Intermediate

Downloads a script and feeds it straight into a shell, so whatever the server returns executes immediately with your privileges. You never see the contents, and the server can return different content to you than to anyone reviewing the URL.

Signals to notice

  • Download piped directly into an interpreter
  • Content is never inspected before it runs
  • Remote server controls what executes

Think you can spot these under time pressure?

Start Training

More Process Execution