List of HTTP/FTP-clients on a server Post: 84488

Sponsored Content

Special Forums Cybersecurity List of HTTP/FTP-clients on a server Post 84488 by indo1144 on Monday 26th of September 2005 02:57:12 AM

09-26-2005

Registered User

List of HTTP/FTP-clients on a server

The other day, a friend of mine had his Linux webserver compromised because he was running a vulnerable PHP-script. The "hacker" had used a malformed URL to include a wget-command to fetch some stuff off the net and install it in /dev/shm where it ran undetected. Fortunately, the webserver ran as a non-priviledged user, so no serious harm was done.

I cleaned his machine for him and took some preventive measures.

I mounted /dev/shm noexec and I moved (what I thought) all HTTP- and FTP-clients to /root/bin and symlinked those from their original location. This way, only the root-user can use these clients. However... my list of clients was not complete and the "hacker" tried once again (using GET) to compromise the system. This time he failed though, because /dev/shm did not allow execution of his scripts. Smilie

The clients I moved to /root/bin included:

links

lynx

wget

curl

GET (the one I initially forgot)

tftp

lftp thanks to LanceBoyles

snarf thanks to LanceBoyles

but I somehow feel this list is not complete. Smilie

Can you help me assemble a complete list of all clients that can be used to download stuff off the net.

Last edited by indo1144; 09-28-2005 at 06:15 AM..

indo1144

View Public Profile for indo1144

Find all posts by indo1144

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

FTP from AIX to 20 Windows clients

I have got a unix server ( AIX ) and 20 clients ( windows 2000 ) . I have to transfer a file through FTP from the server to each of 20 clients daily to check the network speed. But each time I do ftp, I have to enter username and password and then transfer the file using "put <filename>". I...

2. UNIX for Advanced & Expert Users

how to know how many user's connected to ftp and http server

i need to write a program to know how many users are presently connected to my ftp server and http server . i need to keep a count of this and this count should be available to other different software . how to make this GLOBAL so that other softwares can access this count value

3. Solaris

Solaris 8 server and Jumpstarting 2.6 clients

Ladies and Gentlemen: I have successfully configured a Solaris 8 server with Jumpstart! I can Jumpstart Solaris 8 client systems with no problem. My configuration is as follows: Jumpstart Server: Solaris 8 patched with Recommended Patches from June 05. I have installed Solaris 8 in...

4. Shell Programming and Scripting

list files on a server ftp

Hello, I would want to list files of an server FTP with the path of the file... i try "ls -R" but ftp don't accept this command... Is it possible with curl command ??? Regards.

5. AIX

IPsec from one AIX server to many windows clients

I work for a fairly large organization who recently tasked me with securing our telnet services with IPsec. We have a large mixed environment where most of our servers are running unsecured telnet. ssh was my first suggestion but because of the cost of purchasing an enterprise license for a fips...

6. Shell Programming and Scripting

Help needed to transfer list of files to FTP server, to different folders

Hello Unix Gurus, Help required from you. My requirement is something like this I want to create a concurrenct program in Oracle Applications using shell script to transfer files from Apps Server to destination FTP server. I have created custom program, where I will extract all the...

7. IP Networking

Some clients cannot ping UNIX server

All of sudden in this morning, some computers could not connect to our UNIX server while other still could. Some computers could ping the server while some could not. Same on the server side. It could ping some clients but not some. All Windows clients could ping each other. And more, the...

8. Programming

Clients - Server ( UDP )

Hello, I have a question: I want to create a n client to one server connection. This is the client-server algorithm. Enybody help to make the changes?

9. UNIX for Dummies Questions & Answers

Unmounting NFS idle clients from server

Hello World, We have a software repository server in our environment which we use as an NFS server. Now this has been going on well before I was hired. Now, I observed many users not unmounting the NFS resources after their use. I ran showmount and it showed 513 current sessions. :wall: Is...

LEARN ABOUT MOJAVE

curlopt_proxy_transfer_mode

CURLOPT_PROXY_TRANSFER_MODE(3)				     curl_easy_setopt options				    CURLOPT_PROXY_TRANSFER_MODE(3)

NAME

       CURLOPT_PROXY_TRANSFER_MODE - append FTP transfer mode to URL for proxy

SYNOPSIS

       #include <curl/curl.h>

       CURLcode curl_easy_setopt(CURL *handle, CURLOPT_PROXY_TRANSFER_MODE, long enabled);

DESCRIPTION

       Pass  a long. If the value is set to 1 (one), it tells libcurl to set the transfer mode (binary or ASCII) for FTP transfers done via a HTTP
       proxy, by appending ;type=a or ;type=i to the URL. Without this setting, or it being set to 0 (zero, the default),  CURLOPT_TRANSFERTEXT(3)
       has no effect when doing FTP via a proxy. Beware that not all proxies support this feature.

DEFAULT

       0, disabled

PROTOCOLS

       FTP over proxy

EXAMPLE

       TODO

AVAILABILITY

       Added in 7.18.0

RETURN VALUE

       Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if the enabled value is not supported.

SEE ALSO

       CURLOPT_PROXY(3), CURLOPT_HTTPPROXYTUNNEL(3),

libcurl 7.54.0							 February 03, 2016				    CURLOPT_PROXY_TRANSFER_MODE(3)