bintopia.com - BlackDragon

Linux iai.iais.com.au 3.10.0-957.27.2.el7.x86_64 #1 SMP Mon Jul 29 17:46:05 UTC 2019 x86_64
Apache
221.121.155.106
78 Domain

URL to Upload

File Name

Upload Method

Upload from URL

SECURITY

Tips for using socat in secured environments:

* Configure socat to only enable the required features, e.g. to protect your
	filesystem from any accesses through socat: 
	make distclean
	./configure --disable-file --disable-creat --disable-gopen \
		 --disable-pipe	--disable-unix --disable-exec --disable-system
	use "socat -V" to see what features are still enabled; see 
	./configure --help  for more options to disable

* Do NOT install socat SUID root or so when you have untrusted users or
unprivileged daemons on your machine, because the full install of socat can
override arbitrary files and execute arbitrary programs!

* Set logging to "-d -d" (in special cases even higher)

* With files, protect against symlink attacks with nofollow (Linux), and
avoid accessing files in world-writable directories like /tmp

* When listening, use bind option (except UNIX domain sockets)

* When listening, use range option (currently only for IP4 sockets)

* When using socat with system, exec, or in a shell script, know what you do

* With system and exec, use absolute pathes or set the path option

* When starting programs with socat, consider using the chroot option (this
requires root, so use the substuser option too).

* Start socat as root only if required; if so, use substuser option
Note: starting a SUID program after applying substuser or setuid gives the
process the SUID owner, which might give root privileges again.

* Socat, like netcat, is what intruders like to have on their victims machine:
once they have gained a toehold they try to establish a versatile connection 
back to their attack base, and they want to attack other systems. For both
purposes, socat could be helpful. Therefore, it might be useful to install
socat with owner/permissions root:socatgrp/750, and to make all trusted users
members of group socatgrp.

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	drwxr-xr-x	2023-10-26 03:22:06
..	dir	-	root/root	drwxr-xr-x	2026-01-07 03:21:50
BUGREPORTS	file	746 B	root/root	-rw-r--r--	2016-07-21 09:28:19
CHANGES	file	53.13 KB	root/root	-rw-r--r--	2017-08-04 04:56:53
COPYING	file	17.67 KB	root/root	-rw-r--r--	2017-01-06 07:28:42
COPYING.OpenSSL	file	6.13 KB	root/root	-rw-r--r--	2016-07-21 09:28:19
DEVELOPMENT	file	8.29 KB	root/root	-rw-r--r--	2017-01-06 07:28:42
EXAMPLES	file	16.47 KB	root/root	-rw-r--r--	2016-07-21 09:28:19
FAQ	file	3.83 KB	root/root	-rw-r--r--	2016-07-21 09:28:19
PORTING	file	3.02 KB	root/root	-rw-r--r--	2016-07-21 09:28:19
README	file	11.37 KB	root/root	-rw-r--r--	2017-01-06 07:28:42
SECURITY	file	1.81 KB	root/root	-rw-r--r--	2016-07-21 09:28:19
daemon.sh	file	903 B	root/root	-rwxr-xr-x	2017-01-06 08:58:40
ftp.sh	file	4.12 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
gatherinfo.sh	file	4.03 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
mail.sh	file	2.02 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
proxy.sh	file	1.98 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
proxyecho.sh	file	1.19 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
readline-test.sh	file	1.25 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
readline.sh	file	689 B	root/root	-rwxr-xr-x	2017-01-06 08:58:40
socat_buildscript_for_android.sh	file	3.5 KB	root/root	-rwxr-xr-x	2017-01-06 07:28:42
socks4a-echo.sh	file	2.51 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
socks4echo.sh	file	2.3 KB	root/root	-rwxr-xr-x	2017-01-06 08:58:40
test.sh	file	390.77 KB	root/root	-rwxr-xr-x	2017-08-04 04:56:53