Tuesday, April 9, 2013

Dangers in copy and paste to CLI

A reminder for those who are trying to be smart and copy commands found on the internet or via unknown emails, the PASTE may contain dangerous commands.

See http://thejh.net/misc/website-terminal-copy-paste

WARNING, do not try the following if you do not understand dangers of hidden codes. Here below is an attempt to simulate that line to be copied.

Just copy the 1 line below and paste to the CLI, watch what happens.
/dev/null; clear; echo -n "Hello ";whoami|tr -d '\n';echo -e '!\nThat was a bad idea. Don'"'"'t copy code from websites you don'"'"'t trust!
Here'"'"'s the first line of your /etc/passwd: ';head -n1 /etc/passwd
git clone
git://git.kernel.org/pub/scm/utils/kup/kup.git

No comments:

Blog Archive