T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:27- Finding
Unverified Remote Installer Is Executed Directly by Bash
- Content
View full analysis
Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, > or see `references/cli-installation-guide.md` for installation instructions. ``` ### Technical Analysis The Skill instructs the Agent to download a mutable shell script and pass its contents directly to Bash. The downloaded payload is not pinned to a release and is not checked against a cryptographic hash or vendor signature before execution. HTTPS protects the transport connection but does not establish payload immutability or protect against compromise of the origin, CDN, DNS/TLS trust chain, or vendor publishing infrastructure. Because the response is executed immediately, there is no opportunity to inspect or validate the effective code. Installing the CLI may be necessary for the declared malware-scanning function, but direct remote script execution is not the least-privileged or safest installation method. ### Attack Path 1. The Agent determines that Aliyun CLI is missing or older than version 3.3.3. 2. It follows the installation instruction in `SKILL.md`. 3. The remote origin, CDN, or delivery chain returns a modified `setup.sh`. 4. `curl` sends the response directly to Bash. 5. The malicious response executes with all privileges available to the Agent or invoking user. 6. The payload can access local files, environment variables, cloud configuration, and any credentials available to that account. ### Impact Assessment Successful exploitation permits arbitrary command execution under the invoking user’s identity. Depending on that user’s privileges, an attacker could read or alter local files, steal Alibaba Cloud credentials, install persistence, modify executables, or make authenticated cloud API r ...[truncated 204 chars]- Remediation
View remediation