rpms
/
dsniff
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Re-diffed dsniff url log escaping patch for no fuzz

This commit is contained in:
Robert Scheck 2008-08-30 13:44:57 +00:00
parent 55bf1c65c1
commit abb083302c
2 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
dsniff-2.4-urlsnarf_escape.patch
View File

@ -2,8 +2,8 @@ Patch by Hilko Bengen <bengen@debian.org> for dsniff >= 2.4b1, which adds
escaping for user, vhost, uri, referrer and agent strings in the log. For escaping for user, vhost, uri, referrer and agent strings in the log. For
further information, please have a look to Debian bug ID #372536. further information, please have a look to Debian bug ID #372536.
--- dsniff-2.4b1/urlsnarf.c 2006-11-27 17:09:54.000000000 +0100 --- dsniff-2.4b1/urlsnarf.c 2008-08-30 15:34:21.000000000 +0200
+++ dsniff-2.4b1/urlsnarf.c.escape 2006-11-27 17:08:41.000000000 +0100 +++ dsniff-2.4b1/urlsnarf.c.escape 2008-08-30 15:38:46.000000000 +0200
@@ -84,6 +84,43 @@ @@ -84,6 +84,43 @@
return (tstr); return (tstr);
} }
@ -60,13 +60,12 @@ further information, please have a look to Debian bug ID #372536.
- referer = "-"; - referer = "-";
- if (agent == NULL) - if (agent == NULL)
- agent = "-"; - agent = "-";
-
+ user = escape_log_entry(user); + user = escape_log_entry(user);
+ vhost = escape_log_entry(vhost); + vhost = escape_log_entry(vhost);
+ uri = escape_log_entry(uri); + uri = escape_log_entry(uri);
+ referer = escape_log_entry(referer); + referer = escape_log_entry(referer);
+ agent = escape_log_entry(agent); + agent = escape_log_entry(agent);
+
printf("%s - %s [%s] \"%s http://%s%s\" - - \"%s\" \"%s\"\n", printf("%s - %s [%s] \"%s http://%s%s\" - - \"%s\" \"%s\"\n",
libnet_addr2name4(addr->saddr, Opt_dns), libnet_addr2name4(addr->saddr, Opt_dns),
- user, timestamp(), req, vhost, uri, referer, agent); - user, timestamp(), req, vhost, uri, referer, agent);
@ -84,3 +83,4 @@ further information, please have a look to Debian bug ID #372536.
+ free(agent); + free(agent);
} }
fflush(stdout); fflush(stdout);

5
dsniff.spec
View File

@ -1,7 +1,7 @@
Summary: Tools for network auditing and penetration testing Summary: Tools for network auditing and penetration testing
Name: dsniff Name: dsniff
Version: 2.4 Version: 2.4
Release: 0.3.b1%{?dist} Release: 0.4.b1%{?dist}
License: BSD License: BSD
Group: Applications/Internet Group: Applications/Internet
URL: http://www.monkey.org/~dugsong/%{name}/ URL: http://www.monkey.org/~dugsong/%{name}/
@ -82,6 +82,9 @@ rm -rf $RPM_BUILD_ROOT
%{_mandir}/man8/*.8* %{_mandir}/man8/*.8*
%changelog %changelog
* Sat Aug 30 2008 Robert Scheck <robert@fedoraproject.org> 2.4-0.4.b1
- Re-diffed dsniff url log escaping patch for no fuzz
* Wed May 29 2008 Robert Scheck <robert@fedoraproject.org> 2.4-0.3.b1 * Wed May 29 2008 Robert Scheck <robert@fedoraproject.org> 2.4-0.3.b1
- Rebuild against libnids 1.23 - Rebuild against libnids 1.23