[prev in list] [next in list] [prev in thread] [next in thread]
List: firewall-wizards
Subject: [fw-wiz] MonkeyShell: using XML-RPC for access to a remote shell
From: Abe Usher <securitylist () sharp-ideas ! net>
Date: 2004-10-11 2:28:29
Message-ID: 4169EFCD.7030805 () sharp-ideas ! net
[Download RAW message or body]
Security pundits have been warning about the dangers implicit with Web
services for years. A good starting point for understanding the security
issues related to Web services can be found at:
http://searchwebservices.techtarget.com/originalContent/0,289142,sid26_gci872720,00.html
Of course to really understand the security risks posed by Web services,
you need to understand the basics of Web services. Enter an application
I wrote called "Monkey Shell."
MonkeyShell is a simple open source Python application that uses
extensible markup language remote procedure calls (XML-RPC) to execute
commands through a remote system shell.
I kept the code terse (less than 100 lines total) so that it can be
studied easily. It is similar to netcat except instead of "shell
shoveling" data through a raw TCP connection, it wraps data in XML and
transports it over HTTP.
MonkeyShell is freely available at:
http://www.sharp-ideas.net/
Cheers,
Abe Usher, CISSP
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic