Hi,
I understand that there are several highly skilled programmers working together on this software. I would like to request the creation of an
I understand that there are several highly skilled programmers working together on this software.
together on this software. I would like to request the creation of an
MPL application that would allow a person to enter a BASH shell from within their BBS doors menu. This would be accessable to sysops and cosysops loging in remotely. It would basically be the Linux version of DOORWAY. However, I'm not looking for an emulator, but a simple piece of
I understand that there are several highly skilled programmers working together on this software. I would like to request the creation of an
MPL application that would allow a person to enter a BASH shell from within their BBS doors menu. This would be accessable to sysops and cosysops loging in remotely. It would basically be the Linux version of DOORWAY. However, I'm not looking for an emulator, but a simple piece of software that will allow people to run the BASH shell. One main requirement would be to make it such that the nodespy software can see what the sysop/cosysop is doing in that shell. I have run this by
Pequito and he assures me that it can be done, and done in MPL.
Software done either in MPL or python would be cool. Message me back if you are interested and indicate what you would like in return for this code.
lot of mystic mods over the years. My call out is to those who are skilled in MPL and Python who would be willing to make a Mystic/Linux version of the old DOORWAY software, but using BASH instead. Thank you
MPL application that would allow a person to enter a BASH shell from within their BBS doors menu. This would be accessable to sysops and cosysops loging in remotely. It would basically be the Linux version
xqtr wrote to kiya <=-
Invoking Shells from inside another Application, usually its not a good idea. In the past, many bugs and exploits created this way. I would recommend to use SSH and login directly to your system.
kiya wrote to all <=-
I understand that there are several highly skilled programmers working together on this software. I would like to request the creation of an
MPL application that would allow a person to enter a BASH shell from within their BBS doors menu. This would be accessable to sysops and cosysops loging in remotely. It would basically be the Linux version of DOORWAY. However, I'm not looking for an emulator, but a simple piece of software that will allow people to run the BASH shell. One main requirement would be to make it such that the nodespy software can see what the sysop/cosysop is doing in that shell. I have run this by
Pequito and he assures me that it can be done, and done in MPL.
Software done either in MPL or python would be cool. Message me back if you are interested and indicate what you would like in return for this code.
karl wrote to kiya <=-
That being said, in the case of a Linux box running the BBS (mystic)
why not just add a menu option with S255 security (sysop level access) using IS command (ssh connection) to localhost (local machine). This would allow connecting to the box's shell account.
The biggest concern with this is potenial insecurities in the MPL
program or the BBS software itself. Also, if the BBS is accessed via telnet, then anyone with access to the networking equipment handling the traffic between the person accessing and the BBS would be able to spy on whatever the person is doing and potentially be able to access the
server running the BBS as well as anything else on the same or connected networks.
That being said, in the case of a Linux box running the BBS (mystic) why not just add a menu option with S255 security (sysop level access) using IS command (ssh connection) to localhost (local machine). This would allow connecting to the box's shell account.
As someone else pointed out, making a shell available from within the
BBS is a secueity risk, because there's more software in the chain,
and it increases the attack surface. Even worse, if you're connected
via telnet, everything you do is in the clear and accessible to any
packet sniffers along the way.
Richard Menedetter wrote to Vk3jed <=-
I agree wholeheartedly to both of you who absolutely correctly pointed
out those crucial points!!!
kiya wrote to karl <=-
You have some good ideas. However, I run the Mystic software in
SSH-only mode, and the reason I'm looking to get a python or MPL mod to access the BASH shell rather than just invoking it is that I would like nodespy to be able to view what the co-sysop is doing so that in an emergency the sysop can kill the connection. I have considered the
You have some good ideas. However, I run the Mystic software in SSH-only mode, and the reason I'm looking to get a python or MPL mod to access the BASH shell rather than just invoking it is that I would like nodespy to
be able to view what the co-sysop is doing so that in an emergency the sysop can kill the connection. I have considered the risks and believe
sysop can kill the connection. I have considered the risks and believe this to be a worthy endeavor. I back up my system weekly, many times
more than once weekly so I'm not so worried about a malory. If you are out there reading this message and think "well, I can do that," then please consider doing it. I am willing to work out compensation for this mod. In the past when people do mods for me I have donated to the EFF
karl wrote to kiya <=-
Ok, good argument. I don't use nodespy that much because not that many people connect to my bbs but I was thinking. At work I frequently use
Anyway that is just my two cents. If someone came up with this door
idea, I would probably even install it myself. I remember when Avon helped me out when I was first setting up my bbs. We used tmux to
share the terminal session then but I had to open ssh to that device in
my firewall for that to work.
sysop can kill the connection. I have considered the risks and belie this to be a worthy endeavor. I back up my system weekly, many times more than once weekly so I'm not so worried about a malory. If you a out there reading this message and think "well, I can do that," then please consider doing it. I am willing to work out compensation for t mod. In the past when people do mods for me I have donated to the EF
Well... you have been warned... :)
The most simple way is to create a menu command and execute the shell command immediately. For example i will use BASH in linux.
Create a new menu entry and in the command section and add the following:
Command : DD <--- you can also use D-, DC, DG
Data : bash -i
Save the menu and exit. You should run a BASH shell just fine. To close this shell and return to Mystic, just type "exit". If you use another shell just add the command for this appropriate shell ex. command.com :) cmd, ksh etc.
karl wrote to kiya <=-
Ok, good argument. I don't use nodespy that much because not that ma people connect to my bbs but I was thinking. At work I frequently us
I use nodespy occasionally, most often to kick ghosts. Each time, it
was used remotely over SSH in a terminal session separate to the BBS, that's why I'm struggling to understand the need for a shell within the BBS (other than sysop convenience :) ).
Anyway that is just my two cents. If someone came up with this door idea, I would probably even install it myself. I remember when Avon helped me out when I was first setting up my bbs. We used tmux to share the terminal session then but I had to open ssh to that device my firewall for that to work.
Well, for me, I have a firewall that blocks all SSH traffic unless it is coming from my local network, or a predefined IP that I uses for work. All other SSH traffic is blocked. This bit me in the butt when I was traveling and was not at work nor at home. I was able to telnet in of course. So I created a menu option in my sysop menu so I could ssh to localhost. This gave me bash access and I was able to modify my
iptables to allow connections from my location at the time.
Ò Ö· Ò .
Ö·Ò·ÒÖÖ·Ç·Ö·Ò· Ö·Ç ÖÄÖÖÇ·Ö·Ò·ÒÒÒ cyberia.darktech.org
ӶРӶǽÐÐÓ½ÐÐ Ó½Ó ÓÄÓ¶Ó½ÓÄÐ ÐÓÐ kingwood, tx.
Ó½ ½Ó ½
--- Mystic BBS v1.12 A32 (Windows)
* Origin: Agency BBS | telnet://agency.bbs.geek.nz (21:1/101)
Gryphon wrote to Vk3jed <=-
Well, for me, I have a firewall that blocks all SSH traffic unless it
is coming from my local network, or a predefined IP that I uses for
work. All other SSH traffic is blocked. This bit me in the butt when
I was traveling and was not at work nor at home. I was able to telnet
in of course. So I created a menu option in my sysop menu so I could
ssh to localhost. This gave me bash access and I was able to modify my iptables to allow connections from my location at the time.
FWIW, I do my drop to OS differently. Instead of using 'bash -i', I use 'ssh localhost'. That way, I still have to enter a password before
Gryphon wrote to Vk3jed <=-
Well, for me, I have a firewall that blocks all SSH traffic unless it is coming from my local network, or a predefined IP that I uses for work. All other SSH traffic is blocked. This bit me in the butt whe I was traveling and was not at work nor at home. I was able to telne in of course. So I created a menu option in my sysop menu so I could ssh to localhost. This gave me bash access and I was able to modify iptables to allow connections from my location at the time.
Hmm, that's a case of security measures creating an insecurity. ;) My ultimate fallback is I can VPN in to my router on most devices and
appear as part of the LAN. Rarely have to go to that extent. :)
Yes, I was a heavy DOORWAY user back in the DOS days, being remote to
the BBS for most of the time it was online. I also had it tweaked, so I could even reboot the PC (had to set the modem to ignore DTR), while staying online. Just had to be good at having a conversation with the system in AT commands to get back in, once the BBS restarted. Also got pretty good at not crashing the system or having things become unresponsive while in DOS remotely! ;)
| Sysop: | sneaky |
|---|---|
| Location: | Ashburton,NZ |
| Users: | 31 |
| Nodes: | 8 (0 / 8) |
| Uptime: | 131:41:16 |
| Calls: | 2,073 |
| Files: | 11,136 |
| Messages: | 947,522 |