计算机网络安全技术 不同寻常的网络访问控制系统迂回技术

It was all very well to say `Drink me,' but the wise little Alice was not going to do that in a hurry. `No, I'll look first,' she said, `and see whether it's marked "poison" or not'; for she had read several nice little histories about children who had got burnt, and eaten up by wild beasts and other unpleasant things, all because they would not remember the simple rules their friends had taught them: such as, that a red-hot poker will burn you if you hold it too long; and that if you cut your finger very deeply with a knife, it usually bleeds; and she had never forgotten that, if you drink much from a bottle marked `poison,' it is almost certain to disagree with you, sooner or later.

Lewis Carroll "Alice In Wonderland"
English French Russian Spanish Polish Italian
网站首页 | 开发项目 | 技术论文 | 自由论坛 | 关于我们 | 热门联接 | 赞助支持

Wsh, "Web Shell" - 远程控制UNIX/WIN SHELL,它基于HTTP/HTTPS协议,此软件包含两个分别对应其客户端/服务器端的PERL脚本和一个服务端C语言程序。客户端脚本与控制台终端用法相似。服务器端仅以一个CGI脚本的形式出现在目标(受控)主机上。

客户端Wsh-c提供类似于Shell命令行的提示信息,它把用户命令封装在HTTP POST请求中,通过HTTP代理服务器发送到位于目的主机WEB服务器上的服务器端Wsh-s。然后,这个服务端脚本从HTTP POST请求中提取出命令行内容,并运行它,将结果信息封装在HTTP回应信息内回送到客户端,客户端将其打印到标准输出/标准错误上。缺省情况下,两个脚本用异或算法加密HTTP数据。

Web Shell的主要特点:

  1. 支持加密协议套接子;

  2. 支持命令行历史;

  3. 支持文件的上传与下载;

  4. 通过在HTTP消息中运用密匙加密脚本用法信息;

  5. 支持数据流的异或加密;

  6. 可穿越HTTP代理服务器;

  7. 一些附带软件包需要安装在客户端计算机上。

Alex Dyatlov, Simon Castro
Current Wsh version: 2.2.1; README , CHANGELOG
Download | md5sum: 9e48d6b0b8dda53eb8bb2322400fac9a


Link : CGIProxy - CGI script, that acts as an HTTP or FTP proxy. Through it, you can retrieve any resource that is accessible from the erver it runs on.
[project home]

Team member's sites:

GNU  GNU General Public License
 GNU Free Documentation License