Printable View
just wondering if anyone knows how to alter the makefile or other fileswith
netcat to get the -e option up and running.
Hobbit disables it to stop everybody using it.
I have attached some error messages I received and a few bits of the netcat files
that i think need changing or maybe not?I only know the basics of programming to be honest.I suppose this is a good enough way to learn.
thanx
just typed it in instead
Error i got when compiling
make: *** No rule to make target `GAPING_SECURITY_HOLE'. Stop.
************************************************
Here is the mention of it in netcat.c.I tried removing #ifdef & #endif
and putting in #define in place of #ifdef instead but still didnt work.
Dont know if u should do this?Im really only beginning to learn programming!!
#ifdef GAPING_SECURITY_HOLE
char * pr00gie = NULL; /* global ptr to -e arg */
/* doexec :
fiddle all the file descriptors around, and hand off to another prog. Sort
of like a one-off "poor man's inetd". This is the only section of code
that would be security-critical, which is why it's ifdefed out by default.
Use at your own hairy risk; if you leave shells lying around behind open
listening ports you deserve to lose!! */
doexec (fd)
int fd;
{
register char * p;
dup2 (fd, 0); /* the precise order of fiddlage */
close (fd); /* is apparently crucial; this is */
dup2 (0, 1); /* swiped directly out of "inetd". */
dup2 (0, 2);
p = strrchr (pr00gie, '/'); /* shorter argv[0] */
if (p)
p++;
else
p = pr00gie;
Debug (("gonna exec %s as %s...", pr00gie, p))
execl (pr00gie, p, NULL);
bail ("exec %s failed", pr00gie); /* this gets sent out. Hmm... */
} /* doexec */
#endif/* GAPING_SECURITY_HOLE */
**************************************************************************
I dont really know what i was doing but just copied other lines around and I added
these lines below to the makefile because hobbit wrote this in his explanation on
getting the -e working and i think this -D code only goes in a makefile?idont
really know?I use make generic cos make linux wouldnt work.heres what he said
and what i added to make file.Could be all wrong:-
If netcat is compiled with -DGAPING_SECURITY_HOLE, the -e argument specifies
a program to exec after making or receiving a successful connection. In the
listening mode, this works similarly to "inetd" but only for a single instance.
Use with GREAT CARE. This piece of the code is normally not enabled; if you
know what you're doing, have fun. This hack also works in UDP mode. Note that
you can only supply -e with the name of the program, but no arguments. If you
want to launch something with an argument list, write a two-line wrapper script
or just use inetd like always.generic:
DFLAGS = -DGAPING_SECURITY_HOLE #added this at top of makefile?
make -e $(ALL) $(MFLAGS) XFLAGS='-DGENERIC'
<--i added this bit below-------------->
DFLAGS='- DGAPING_SECURITY_HOLE' STATIC=
Hello dkennedy,
Could you please post where you found the source or email it to me..so I can look at the whole thing..
I'll give it a try..but I don't know how useful I will be, because I don't run a Unix based OS.
Email me the entire source or post where you found... and I will take a crack at it :)
Hope I can help :)
-- See this is a perfect example..of why AO should have a security programmers forum :D --
DKenney...
Thanks for emailing the source files...
OK.. here is what I suggest:
Within the netcat.c add this line :
/* This should enable the -e option */
#define GAPING_SECURITY_HOLE
ABOVE THE LINE:
"#ifdef GAPING_SECURITY_HOLE"
Why This Should Work
The "#ifdef GAPING_SECURITY_HOLE" simply means that if GAPING_SECURITY_HOLE is not defined within the source, then the compiler should ignore the entrie block.
So if we add this statement:
#define GAPING_SECURITY_HOLE
"GAPING_SECURITY_HOLE" has been defined and the compiler will compile the code contained within that block.
Try and compile the program normally...It should work now :)
The Make File should not need modification!
Unfortunetly.. I couldn't try compiling...because I don't run a UNIX based operating system.
I hope this helps to fix your problem :)
FIRST..let me say this.... I am more than glad to help anyone!
BUT
What you have just posted is COMPLETELY UNCALLED FOR!
I AM PERSONALLY ANGERED BY YOUR POST...WHATEVER IT IS THAT YOU DO IN REAL LIFE IS YOUR BUSINESS!Quote:
Oh, by the way, I forgot to mention that I like little boys. Does anyone feel like helping me out now? I'll suck your ****.
I HOPE I SPEAK FOR OTHERS WHEN I SAY...DON'T BRING THAT CRAP TO THIS FORUM... THIS IS A SECURITY FORUM NOT A PERSONALS FORUM...
SHAPE UP OR SHIP OUT !!!!
Man what the hell is this, its got nothing to do with anything and it's sick. Im jewish man I dont want to see this kind of crap. God I didnt expect this kinda thing here.Quote:
Originally posted by dkennedy
Oh, by the way, I forgot to mention that I like little boys. Does anyone feel like helping me out now? I'll suck your ****.
Who in their right mine would say such a thing.I'm disgusted by this sicko's atitude.
i did not post that--i swear to god i didnt write tyhat at all
please believe me
i dont know how that happened.
i really would like to ask the owners of this site to find out what could of happened.
please believe me
i have set up a new account and would like to say again that i have nothing to do with the f***ing pyschotic post above.
i am now doing a full virus scan and trying to get the post removed.
I hope i have your trust in this.
i am probably the most anti-fascist person,anti-paedophile,and anti-homophobic person i know
:confused:
Thanx simon for the help but it still didnt work with that define included:
#define GAPING_SECURITY_HOLE
i got this error again
make: *** No rule to make target `GAPING_SECURITY_HOLE'. Stop.
anymore suggestions would be welcome.
:)
If you really did not post that, did you also not write that pm i got from your address?
if pm stands for past mail
i did send you an e-mail b4 cos you are one of the few people from ireland i have seen at these type sites.
other than that e-mail i didnt send you anything else.
sorry about the confusion this is really pissing me off:mad:
like to have some suggestions as to how someone could do this.
i dont have a trojan on my comp
send a message to Jp he is the founder of AntiOnline and can probably help you out.
Hey man Im Irish too, a Dubliner. I have found no more than 5 Irish security/hackes and one of them was a virus programmer.
Go to www.linux.ie theres some real people there but only venture there if you know youre stuff real well, Im just a lurker there.
I'm happy to hear that it was not you that posted that crap!
I hope that issue will be resolved!
...Ok..now I'm going to give this netcat.c program another crack... :D ...It would help if I was on a UNIX system..but I'm on Win32 so as I said before its going to be difficult. But I'll give it another go.
I had previously started on reading up the syntax of makefiles from the GNU documentation...so I think I can figure it out. :)
Question: What command are you using to compile this program? (including any command line arguments)
I hope I will be able to help!
Did i miss something? Why was everyone getting so uptight?
Ok...siouxchief
Let's try this:
Open the makefile and below:
# start with this for a new architecture, and see what breaks.
generic:
make -e $(ALL) $(MFLAGS) XFLAGS='-DGENERIC' STATIC=
Add These Lines
test:
make -e $(ALL) $(MFLAGS) XFLAGS='-DGENERIC' DFLAGS='-DGAPING_SECURITY_HOLE' STATIC=
Note:
make sure that "make -e $(ALL) $(MFLAGS) XFLAGS='-DGENERIC' DFLAGS='-DGAPING_SECURITY_HOLE' STATIC=" is all on one line!
Also make sure that there is 1 tab preceeding that line.
So the format is:
test:
[tab] [whatever the line]
What we have just done is make a new rule called "test" so now you should be able to just type the following:
make test
And hopefully it should work fine! Try that and let me know what happens!
just back from the pub (typical irish ,,,only messing,--maybe stereotypical irish?)
anyway got yer individual e-mails and i appreciate it--glad to know people still trust other people.
e-mailed anti-online but really dont have a clue how this happened--as ye say probably some sad script kiddie --anyway thanks for the help.
go raibh maith agat (to ennis and p mc evoy)
cheers to everybody else (especially simon )
p.s. go raibh maith agat is irish for thanks
Where in Ireland you from man, I know p mcevoy is a Belfast man.
[hows things up there?]
Slan Tamall!
Alright Ennis, Dave's from cork afaik.
Things in belfast are pretty bad i'm afraid to say, my local bar has just closed down, i was in playing pool last week when some guys drove past shooting at the place, and the same tramps came in a few days later and started smackin people in the head with bottles, just cuz the bar won't pay protection money :-(
Apart from that though, everythings grand!
Tiocfaidh ar lar
Get the feeling people will be complaining about us chit-chatting in here but sure "pog mo thoin".
Petes right Ennis,im from Cork.Hope Dublin is more interesting than it is than down here at the moment.
Sorry to hear about those shootings Pete.The other day i was only telling people how Belfast was brilliant to go out on the tear cos i was up there for the first time at the radiohead gig last month.Thats some arena ye have got.No queing for drink or anything :D
Anyway we should meet up in #Hackers_ireland on irc maybe some time.Havent been to it yet both dont know any other place where irish people interested in comp security seem to hang out.
slan libh
Sounds like a good idea [IRC] and Dublin is well pretty good these days same as usual I suppose.
Sorry bout the problems up there pete [will it ever end?]
Anyway they should set up an Irish people's forum!:drink: