how to accept an arbitrary parameter/anti-NIMDA script
I'm looking at how to get this anti-NIMDA script to work in zope ( http://pc.xs4all.nl/default.ida) The thing is, it's called with a parameter (trying to cause a buffer overflow). For example: /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a That site has a default.ida which will pass back a perlscript that turns off that particular machine's virus under certain cases... sounds like a good thing. But how can I get an object called default.ida to accept anything passed after the "?" and what kind of object (python script?) should it be?
You can use a **kw argument in a Python Script. Florent Guillaume Nuxeo marc lindahl <marc@bowery.com> wrote:
I'm looking at how to get this anti-NIMDA script to work in zope ( http://pc.xs4all.nl/default.ida)
The thing is, it's called with a parameter (trying to cause a buffer overflow). For example:
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
That site has a default.ida which will pass back a perlscript that turns off that particular machine's virus under certain cases... sounds like a good thing. But how can I get an object called default.ida to accept anything passed after the "?" and what kind of object (python script?) should it be?
_______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
-- Florent Guillaume, Nuxeo SARL (Paris, France) +33 1 40 33 79 87 http://nuxeo.com mailto:fg@nuxeo.com
marc lindahl writes:
I'm looking at how to get this anti-NIMDA script to work in zope ( http://pc.xs4all.nl/default.ida)
The thing is, it's called with a parameter (trying to cause a buffer overflow). For example:
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
That site has a default.ida which will pass back a perlscript that turns off that particular machine's virus under certain cases... sounds like a good thing. But how can I get an object called default.ida to accept anything passed after the "?" and what kind of object (python script?) should it be? It can be anything with an explicit or implicit REQUEST parameter.
You can look at "REQUEST.form", e.g. "REQUEST.form.items()". Dieter
From: Dieter Maurer <dieter@handshake.de>
thing. But how can I get an object called default.ida to accept anything passed after the "?" and what kind of object (python script?) should it be? It can be anything with an explicit or implicit REQUEST parameter.
Meaning DTML method or PythonScript, but not DTML document?
participants (3)
-
Dieter Maurer -
Florent Guillaume -
marc lindahl