Re: question regarding exploits

From: Brad Spangler (brad_spangler_at_yahoo.com)
Date: 11/09/05

  • Next message: Li Yinchao: "Re: Architecture of NESSUS" 
    Date: Tue, 08 Nov 2005 20:01:02 -0600
To: security-basics@securityfocus.com

    The SHTML file extension is just the typical way you indicate to Apache
    that it should parse the document for Server Side Include (SSI)
    directives and carry them out before sending the resulting composite
    page (output) to the web browser.

    You'll want to start by reading this:

    Apache Tutorial: Introduction to Server Side Includes
    http://httpd.apache.org/docs/1.3/howto/ssi.html

    Justin wrote:
    > Juan,
    >
    > If i remeber correctly, *.shtml are server side HTML, or something
    > like that. Examin them with `less' or in vim. You may also try opening
    > them in firefox.
    >
    > peace,
    > --Justin
    >
    >
    >
    > On 11/7/05, Juan B <juanbabi@yahoo.com> wrote:
    >
    >>HI !
    >>
    >>
    >>I have a ftp server Serv-U. I want to check it for
    >>volunrabilities I stared using Whoppix live linux I
    >>ran a search for this version under securityfocus.com
    >>database and I found many exploits,few of tham are
    >>with
    >>an extantion of .shtml like this one indexdate.shtml
    >>
    >>what should I do with those?
    >>
    >>maybe copy and paste theyre contant and than compile ?
    >>
    >>thanks again and thanks for your time !
    >>
    >>Juan
    >>
    >>
    >>
    >>__________________________________
    >>Yahoo! FareChase: Search multiple travel sites in one click.
    >>http://farechase.yahoo.com
    >>
    >
    >

  • Next message: Li Yinchao: "Re: Architecture of NESSUS"

    Relevant Pages

    • Re: Post-SP2: How to view SHTML file on hard drive with IE?
      ... A separate server may become a necessity. ... page is HTML and has the SHTML links. ... which lets IE load the SHTML - until the original ...
      (microsoft.public.windowsxp.general)
    • Re: Problem getting Server Side Includes SSI to work on Fedora 8.
      ... This used to work at RedHat 9 but the server ... AddOutputFilter INCLUDES .shtml ... A subdirectory below the document root has the .shtml file and the ...
      (uk.comp.os.linux)
    • Re: Problem getting Server Side Includes SSI to work on Fedora 8.
      ... server has been updated several times recently and is currently running ... AddOutputFilter INCLUDES .shtml ... A subdirectory below the document root has the .shtml file and the ... The default config doesn't include that - you ...
      (uk.comp.os.linux)
    • Re: Trouble moving servers with asp.net
      ... I renamed the page to have a .aspx extension and it works fine ... > we are having trouble with what appears to be ASP.NET server side includes ... > in the .shtml files. ... > I have mapped the .shtml files on the site to use the aspnet_isapi dll ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Trouble with ASP.NET
      ... I renamed the page to have a .aspx extension and it works fine ... > we are having trouble with what appears to be ASP.NET server side includes ... > in the .shtml files. ... > I have mapped the .shtml files on the site to use the aspnet_isapi dll ...
      (microsoft.public.inetserver.iis)