List of HTTP/FTP-clients on a server Post: 84488

Sponsored Content

Special Forums Cybersecurity List of HTTP/FTP-clients on a server Post 84488 by indo1144 on Monday 26th of September 2005 02:57:12 AM

09-26-2005

Registered User

List of HTTP/FTP-clients on a server

The other day, a friend of mine had his Linux webserver compromised because he was running a vulnerable PHP-script. The "hacker" had used a malformed URL to include a wget-command to fetch some stuff off the net and install it in /dev/shm where it ran undetected. Fortunately, the webserver ran as a non-priviledged user, so no serious harm was done.

I cleaned his machine for him and took some preventive measures.

I mounted /dev/shm noexec and I moved (what I thought) all HTTP- and FTP-clients to /root/bin and symlinked those from their original location. This way, only the root-user can use these clients. However... my list of clients was not complete and the "hacker" tried once again (using GET) to compromise the system. This time he failed though, because /dev/shm did not allow execution of his scripts. Smilie

The clients I moved to /root/bin included:

links

lynx

wget

curl

GET (the one I initially forgot)

tftp

lftp thanks to LanceBoyles

snarf thanks to LanceBoyles

but I somehow feel this list is not complete. Smilie

Can you help me assemble a complete list of all clients that can be used to download stuff off the net.

Last edited by indo1144; 09-28-2005 at 06:15 AM..

indo1144

View Public Profile for indo1144

Find all posts by indo1144

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

FTP from AIX to 20 Windows clients

I have got a unix server ( AIX ) and 20 clients ( windows 2000 ) . I have to transfer a file through FTP from the server to each of 20 clients daily to check the network speed. But each time I do ftp, I have to enter username and password and then transfer the file using "put <filename>". I...

2. UNIX for Advanced & Expert Users

how to know how many user's connected to ftp and http server

i need to write a program to know how many users are presently connected to my ftp server and http server . i need to keep a count of this and this count should be available to other different software . how to make this GLOBAL so that other softwares can access this count value

3. Solaris

Solaris 8 server and Jumpstarting 2.6 clients

Ladies and Gentlemen: I have successfully configured a Solaris 8 server with Jumpstart! I can Jumpstart Solaris 8 client systems with no problem. My configuration is as follows: Jumpstart Server: Solaris 8 patched with Recommended Patches from June 05. I have installed Solaris 8 in...

4. Shell Programming and Scripting

list files on a server ftp

Hello, I would want to list files of an server FTP with the path of the file... i try "ls -R" but ftp don't accept this command... Is it possible with curl command ??? Regards.

5. AIX

IPsec from one AIX server to many windows clients

I work for a fairly large organization who recently tasked me with securing our telnet services with IPsec. We have a large mixed environment where most of our servers are running unsecured telnet. ssh was my first suggestion but because of the cost of purchasing an enterprise license for a fips...

6. Shell Programming and Scripting

Help needed to transfer list of files to FTP server, to different folders

Hello Unix Gurus, Help required from you. My requirement is something like this I want to create a concurrenct program in Oracle Applications using shell script to transfer files from Apps Server to destination FTP server. I have created custom program, where I will extract all the...

7. IP Networking

Some clients cannot ping UNIX server

All of sudden in this morning, some computers could not connect to our UNIX server while other still could. Some computers could ping the server while some could not. Same on the server side. It could ping some clients but not some. All Windows clients could ping each other. And more, the...

8. Programming

Clients - Server ( UDP )

Hello, I have a question: I want to create a n client to one server connection. This is the client-server algorithm. Enybody help to make the changes?

9. UNIX for Dummies Questions & Answers

Unmounting NFS idle clients from server

Hello World, We have a software repository server in our environment which we use as an NFS server. Now this has been going on well before I was hired. Now, I observed many users not unmounting the NFS resources after their use. I ran showmount and it showed 513 current sessions. :wall: Is...

LEARN ABOUT OSX

git-http-fetch

GIT-HTTP-FETCH(1)						    Git Manual							 GIT-HTTP-FETCH(1)

NAME

       git-http-fetch - Download from a remote Git repository via HTTP

SYNOPSIS

       git http-fetch [-c] [-t] [-a] [-d] [-v] [-w filename] [--recover] [--stdin] <commit> <url>

DESCRIPTION

       Downloads a remote Git repository via HTTP.

       NOTE: use of this command without -a is deprecated. The -a behaviour will become the default in a future release.

OPTIONS

       commit-id
	   Either the hash or the filename under [URL]/refs/ to pull.

       -c
	   Get the commit objects.

       -t
	   Get trees associated with the commit objects.

       -a
	   Get all the objects.

       -v
	   Report what is downloaded.

       -w <filename>
	   Writes the commit-id into the filename under $GIT_DIR/refs/<filename> on the local end after the transfer is complete.

       --stdin
	   Instead of a commit id on the command line (which is not expected in this case), git http-fetch expects lines on stdin in the format

	       <commit-id>['	'<filename-as-in--w>]

       --recover
	   Verify that everything reachable from target is fetched. Used after an earlier fetch is interrupted.

GIT

       Part of the git(1) suite

Git 2.17.1							    10/05/2018							 GIT-HTTP-FETCH(1)