|
|
 |
|
|
Thread Tools | Display Modes |
Jun 14th, 2006, 4:36 PM
|
#31 |
|
Programming Guru
 
Join Date: Apr 2005
Location: Waterloo, Ontario
Posts: 2,094
Rep Power: 6
  |
Well, plus this is free, no registration required, and unlimited space.
How would a user execute a file they saved? =S @hervens: A home webserver. |
|
|
|
Jun 14th, 2006, 4:37 PM
|
#32 |
|
Hobbyist Programmer
Join Date: Apr 2006
Location: Montreal, Canada
Posts: 107
Rep Power: 3
 |
oh ok
|
|
|
|
Jun 14th, 2006, 4:45 PM
|
#33 | |
|
Programming Guru
Join Date: Jul 2004
Location: United States
Posts: 3,473
Rep Power: 8
 |
Quote:
__________________
http://jasonpowers.net "There are a thousand hacking at the branches of evil to one who is striking at the root." |
|
|
|
|
|
Jun 14th, 2006, 4:47 PM
|
#34 |
|
Hobbyist Programmer
Join Date: Jun 2006
Posts: 137
Rep Power: 0
|
I would run it on my home server... When I get my FreeBSD to work that is.
|
|
|
|
|
Jun 14th, 2006, 5:51 PM
|
#35 |
|
Programming Guru
Join Date: Apr 2005
Location: Waterloo, Ontario
Posts: 2,094
Rep Power: 6
|
Oh. So you're talking about executing it client side? -.-
|
|
|
|
|
Jun 14th, 2006, 7:03 PM
|
#36 |
|
Hobbyist Programmer
Join Date: Jun 2006
Posts: 137
Rep Power: 0
|
I think I posted that in the wrong place lol, sorry...
|
|
|
|
|
Jun 14th, 2006, 8:05 PM
|
#37 |
|
Programming Guru
Join Date: Apr 2005
Location: Waterloo, Ontario
Posts: 2,094
Rep Power: 6
|
Wah? I wasn't even responding to what you said. In case that's why you said wrong post. Unless you really did post in the wrong place (coincidentally in context).
 |
|
|
|
|
Jun 14th, 2006, 8:07 PM
|
#38 |
|
Hobbyist Programmer
Join Date: Jun 2006
Posts: 137
Rep Power: 0
|
Sorry I scrolled up to see who you were talking to and then I saw my post and was like shit, its in the wrong place lol...
|
|
|
|
|
Jun 15th, 2006, 9:10 AM
|
#39 | |
|
Programming Guru
Join Date: Jul 2004
Location: United States
Posts: 3,473
Rep Power: 8
|
Quote:
I go to your site and create a file/script, that contains some malicious code. I save the file then go to your server, specifically to that file through my browser and execute it. I was just curious as to if there were any constraints on contents of files, or execution of saved files... more or less for the prevention of an intrusion/attack. In other words, when a user saves a file at what location is it stored? Can the user get directly to the file and execute it via a browser? Or is the contents stored in a database that is queried when someone wants to view it?
__________________
http://jasonpowers.net "There are a thousand hacking at the branches of evil to one who is striking at the root." |
|
|
|
|
|
Jun 15th, 2006, 12:54 PM
|
#40 |
|
Hobbyist Programmer
Join Date: Oct 2005
Location: Indiana
Posts: 224
Rep Power: 0
|
If you choose a filename, you could choose "abadscript.php".
Then if you know the path you would go to http://onlinefileeditor/username/abadscript.php instead of opening it through the actual website. If the server isn't configured to block scripts in user directories it would run the script. etc.
__________________
#programmingforums relay - http://thegupstudio.com/cgi-bin/pforelay.cgi freelance scripts - http://ryanguthrie.com/index.html |
|
|
|
|
| Bookmarks |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
