Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I've used it in the past so I could run commands on a server, when the administrator only gave me FTP access.

Uploading PHP files with system() calls works too, but C99 is much easier to use.

But yes, I only came to know it when I was a stupid defacer teen. Shame on me.



If the only tool you have is FTP then either you're an attacker with a single set of compromised credentials, or a legitimate user forced to act like one.


Maybe I live in a place where technology (and security practices, specifically) goes forward later than Silicon Valley?

(Answer: yes)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: