Sponsored Content
Special Forums Cybersecurity Destructive one word unix commands Post 302591140 by aydinh on Wednesday 18th of January 2012 03:47:44 PM
Old 01-18-2012
Destructive one word unix commands

Hi I'm trying to hack a web server as part of an assignment and have gotten it to exec commands but I cannot pass commands arguments as the program splits up space separated words and only execs the first one. Is there anything I can pass to cause any sort of damage in one word? Btw webserver runs as root.

Also is it possible to host a script and just pass the location of that to the web server? Eg &_cmd=10.10.1.3/tmp/script.sh&blahblah

Would that work?


Thanks
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Maingrame to UNIX sending UNIX commands

I want to know if there is a way to send unix commands thru FTP from a mainframe to kick off Autosys Jobs. I just need to send a command from the mainframe to UNIX and have UNIX execute that command. (2 Replies)
Discussion started by: skammer
2 Replies

2. UNIX for Dummies Questions & Answers

Running UNIX commands remotely in Windows box from Unix box – avoid entering password

I am able to run the UNIX commands in a Windows box from a UNIX box through "SSH" functionality. But whenever the SSH connection is established between UNIX and Windows, password for windows box is being asked. Is there a way to avoid asking password whenever the SSH connection is made? Can I... (1 Reply)
Discussion started by: D.kalpana
1 Replies

3. UNIX for Dummies Questions & Answers

How can find exactly word in Unix?

How can find exactly word in Unix? Hi all? I have on fine it contains data like: Recalculation Dates started Performance History Recalc Scheduling started Recalculation started New Recalculation started But I want output like: Recalculation started(3rd line) So , please... (3 Replies)
Discussion started by: koti_rama
3 Replies

4. Linux

word substitution in unix

Hi I am trying to substitute 2 words on the same line with _S02 as suffix. Like this . IN "TSOPS09" INDEX IN "TSOPIX09" ; to IN "TSOPS09_S02" INDEX IN "TSOPIX09_S02" ; i used the following code to make the change , it works fine for first substitution not the second one . ... (6 Replies)
Discussion started by: capri_drm
6 Replies

5. Windows & DOS: Issues & Discussions

how do I replace a word in a file using DOS commands??

how do I replace a word in a file using DOS commands?? (1 Reply)
Discussion started by: sabithareddym
1 Replies

6. Shell Programming and Scripting

Self destructive script

How should i write a script so that the script will destroy(delete) itself once it completes execution. Thanks? (7 Replies)
Discussion started by: proactiveaditya
7 Replies

7. Virtualization and Cloud Computing

is mdadm --incremental --rebuild --run --scan destructive?

Hello Unix Community: My task to figure out how to add a 20G volume to an existing EBS Array (RAID0) at AWS. I haven't been told that growing the existing volumes isn't an option, or adding another larger volume to the existing array is the way to go. The client's existing data-store is... (0 Replies)
Discussion started by: Habitual
0 Replies

8. UNIX for Dummies Questions & Answers

Find EXACT word in files, just the word: no prefix, no suffix, no 'similar', just the word

I have a file that has the words I want to find in other files (but lets say I just want to find my words in a single file). Those words are IDs, so if my word is ZZZ4, outputs like aaZZZ4, ZZZ4bb, aaZZZ4bb, ZZ4, ZZZ, ZyZ4, ZZZ4.8 (or anything like that) WON'T BE USEFUL. I need the whole word... (6 Replies)
Discussion started by: chicchan
6 Replies

9. HP-UX

Format unit requires destructive mode???

I am trying to format a Seagate 2 Gb SCSI drive using the HP-UX 9.0 support disc and I receive a message that says: DESTRUCTIVE MODE REQUIRED TO EXECUTIVE THIS COMMAND (SCD2WARN 106). I have entered this command several times on other SCSI drives and never got this message. Anyone ever see this... (8 Replies)
Discussion started by: edspit
8 Replies

10. UNIX for Beginners Questions & Answers

UNIX script to check word count of each word in file

I am trying to figure out to find word count of each word from my file sample file hi how are you hi are you ok sample out put hi 1 how 1 are 1 you 1 hi 1 are 1 you 1 ok 1 wc -l filename is not helping , i think we will have to split the lines and count and then print and also... (4 Replies)
Discussion started by: mirwasim
4 Replies
MKTAP(1)																  MKTAP(1)

NAME
mktap - create twisted.servers SYNOPSIS
mktap [options] apptype [application_option]... mktap apptype --help DESCRIPTION
The --help prints out a usage message to standard output. --debug, -d Show debug information for plugin loading. --progress, -p Show progress information for plugin loading. --encrypted, -e Encrypt file before writing (will make the extension of the resultant file begin with 'e'). --uid, -u <uid> Application belongs to this uid, and should run with its permissions. --gid, -d <gid> Application belongs to this gid, and should run with its permissions. --append, -a <file> Append given servers to given file, instead of creating a new one. File should be be a tap file. --appname, -n <name> Use the specified name as the process name when the application is run with twistd(1). This option also causes some initialization code to be duplicated when twistd(1) is run. --type, -t <type> Specify the output file type. Available types are: pickle - (default) Output as a python pickle file. source - Output as a .tas (AOT Python source) file. apptype Can be 'web', 'portforward', 'toc', 'coil', 'words', 'manhole', 'im', 'news', 'socks', 'telnet', 'parent', 'sibling', 'ftp', and 'mail'. Each of those support different options. portforward options -h, --host <host> Proxy connections to <host> -d, --dest_port <port> Proxy connections to <port> on remote host. -p, --port <port> Listen locally on <port> web options -u, --user Makes a server with ~/public_html and ~/.twistd-web-pb support for users. --personal Instead of generating a webserver, generate a ResourcePublisher which listens on ~/.twistd-web-pb --path <path> <path> is either a specific file or a directory to be set as the root of the web server. Use this if you have a directory full of HTML, cgi, php3, epy, or rpy files or any other files that you want to be served up raw. -p, --port <port> <port> is a number representing which port you want to start the server on. -m, --mime_type <mimetype> <mimetype> is the default MIME type to use for files in a --path web server when none can be determined for a particular extension. The default is 'text/html'. --allow_ignore_ext Specify whether or not a request for 'foo' should return 'foo.ext'. Default is off. --ignore-ext .<extension> Specify that a request for 'foo' should return 'foo.<extension>'. -t, --telnet <port> Run a telnet server on <port>, for additional configuration later. -i, --index <name> Use an index name other than "index.html" --https <port> Port to listen on for Secure HTTP. -c, --certificate <filename> SSL certificate to use for HTTPS. [default: server.pem] -k, --privkey <filename> SSL certificate to use for HTTPS. [default: server.pem] --processor <ext>=<class name> Adds a processor to those file names. (Only usable if after --path) --resource-script <script name> Sets the root as a resource script. This script will be re-evaluated on every request. This creates a web.tap file that can be used by twistd. If you specify no arguments, it will be a demo webserver that has the Test class from twisted.web.test in it. toc options -p <port> <port> is a number representing which port you want to start the server on. mail options -r, --relay <ip>,<port>=<queue directory> Relay mail to all unknown domains through given IP and port, using queue directory as temporary place to place files. -d, --domain <domain>=<path> generate an SMTP/POP3 virtual maildir domain named "domain" which saves to "path" -u, --username <name>=<password> add a user/password to the last specified domains -b, --bounce_to_postmaster undelivered mails are sent to the postmaster, instead of being rejected. -p, --pop <port> <port> is a number representing which port you want to start the pop3 server on. -s, --smtp <port> <port> is a number representing which port you want to start the smtp server on. This creates a mail.tap file that can be used by twistd(1) telnet options -p, --port <port> Run the telnet server on <port> -u, --username <name> set the username to <name> -w, --password <password> set the password to <password> socks options -i, --interface <interface> Listen on interface <interface> -p, --port <port> Run the SOCKSv4 server on <port> -l, --log <filename> log connection data to <filename> ftp options -a, --anonymous Allow anonymous logins -3, --thirdparty Allow third party connections --otp Use one time passwords (OTP) -p, --port <port> Run the FTP server on <port> -r, --root <path> Define the local root of the FTP server --anonymoususer <username> Define the the name of the anonymous user manhole options -p, --port <port> Run the manhole server on <port> -u, --user <name> set the username to <name> -w, --password <password> set the password to <password> words options -p, --port <port> Run the Words server on <port> -i, --irc <port> Run IRC server on port <port> -w, --web <port> Run web server on port <port> AUTHOR
Written by Moshe Zadka, based on mktap's help messages REPORTING BUGS
To report a bug, visit http://twistedmatrix.com/bugs/ COPYRIGHT
Copyright (C) 2000-2008 Twisted Matrix Laboratories. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICU- LAR PURPOSE. SEE ALSO
twistd(1) July 2001 MKTAP(1)
All times are GMT -4. The time now is 10:07 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy