Path: csiph.com!weretis.net!feeder6.news.weretis.net!i2pn.org!rocksolid2!.POSTED.127.117.190.215!not-for-mail From: Anonymous Newsgroups: rocksolid.programming Subject: Lynx Date: Wed, 16 Dec 2020 16:05:14 -0800 Organization: rocksolid2 (novabbs.org) Message-ID: References: Content-Type: text/plain; charset=UTF-8 Injection-Info: novabbs.org; posting-account="def.i2p"; posting-host="127.117.190.215"; logging-data="30576"; mail-complaints-to="usenet@novabbs.org" Xref: csiph.com rocksolid.programming:154 >>9c7631636504114e50 >I added lynx as a door a few years ago in synchronet and it worked great, what does that mean: "as a door" ? >that by default lynx would allow shell escapes, I checked for that, was not the case for me (unless I checked the wrong things). At least I was not able to inject any commands that way (over the webui). Can you give an example of a successful attack string ? For the design: I have to say that the hard work in this was done by somebody else (for free, as in free beer). I just adapted some sources to my needs. And yes, I am quite pleased with the outcome myself. I can also see that it is already used, although half the functionality is missing yet. :-) -- Posted on def2