Beefy Boxes and Bandwidth Generously Provided by pair Networks
Your skill will accomplish
what the force of many cannot

Re^2: how to improve my script

by skx (Parson)
on Jun 15, 2009 at 19:50 UTC ( #771784=note: print w/ replies, xml ) Need Help??

in reply to Re: how to improve my script
in thread how to improve my script

I downloaded and ran your code, and traversals with ".." definitely work:

skx@gold:~$ telnet 4321 Trying Connected to Escape character is '^]'. GET /../../../../../../etc/passwd HTTP/1.0 root:x:0:0:root:/root:/bin/bash ..

I notice too that you never return a content-type in your response which is surprising to say the least! (I was surprised that firefox displayed the resulting pages correctly.)


Comment on Re^2: how to improve my script
Download Code

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://771784]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others drinking their drinks and smoking their pipes about the Monastery: (7)
As of 2015-03-03 01:46 GMT
Find Nodes?
    Voting Booth?

    When putting a smiley right before a closing parenthesis, do you:

    Results (64 votes), past polls