4iar / evil-pipe

A web server that detects if the output of curl/wget is piped to bash and sends different payloads accordingly

evil-pipe

Build

$ mkdir build && cd build
$ cmake ..
$ make

Usage

Payload scripts are read from two files:

File	When it is sent
pipe_payload.txt	curl | bash
non_pipe_payload.txt	curl

After configuring the payloads, start the server with a port

$ ./evil-pipe <port>

Acknowledgements

Uses Phil's passive delay method.