Message Board

Installing Honey Pots

Need filename to be .pl

Author: M.Paugh (18 Jan 05 11:33am)

I'm trying to install a honey pot on a non-standard server that doesn't do anything the way one would expect. Among other things it will only run CGI scripts with the extension pl. Normally this is simple, I just rename the .cgi to .pl and everything works... but from what I'm reading in the install instructions, the honey pot script depends on its filename in some way? And when I generate the script using this site, I can select the name but it specifically says not to include the extension--well, that's the point, I need the extension to be right or it won't work. If I rename the generated script to .pl and run it, I just get a blank page (document has no data). (If I try to use the .cgi script I get errors, because like I said, the server won't run .cgi files.)

I'd use PHP, but there is no PHP support on this server, just Perl...

Thanks!

Post Edited (18 Jan 05 10:34am)

Re: Need filename to be .pl

Author: M.Prince (18 Jan 05 8:29pm)

Ask and you shall receive...

We're in the process of loosening some of the restrictions we put on the system initially to make it easier for people with particular setups to install honey pots more easily. As you requested, we'll allow you to use either .cgi or .pl as the extension for Perl scripts. We may loosen the requirements even more. Should start working in the next 24 hours or so. You shouldn't have to download a new version, just change the extension.

Thanks for your interest in the Project!

Re: Need filename to be .pl

Author: M.Prince (18 Jan 05 11:45pm)

Non-standard filename extensions now work. As long as your server is setup to execute a certain file extension under the appropriate language (Perl/PHP or others coming soon....) you can use any extension for the file you want.

If you want even more flexibility you can use mod_rewrite to point an even wider variety of URL formats.

Let us know if you have any trouble, but the installation process should now be a bit more forgiving.

Re: Need filename to be .pl

Author: M.Paugh (20 Jan 05 11:33am)

Thanks for the fast reply!

Unfortunately it is still not working. I took the liberty of temporarily adding debugging lines to the code (I hope this is okay) to try to pinpoint the error so that I could be more helpful than just saying "it doesn't do anything." I don't know if this is the only problem, but I seem to have narrowed at least part of the problem down to the fact that SCRIPT_FILENAME doesn't exist (isn't set) on this server. (Yes, the server is IIS... though I didn't see anything anywhere saying that IIS isn't supported? I could have just missed it, I'm sorry...)

I can go into more detail but I'm not sure I should do so in a public forum, heh.

Thanks again!

Re: Need filename to be .pl

Author: K.Kirkpatrick (13 Feb 05 8:31am)

I forgot to check CHMOD before testing mine.

DOH! 500 ERROR

I do know though that alternative doctypes work so long as the name is the same.
Mine isn't set up as either .pl or .cgi but something more unusual. It took longer for me to finish scratching my head and wonderin what the problem was than it took to fix mine.

Might be worth a check.

Re: Need filename to be .pl

Author: A.Daviel (20 Feb 05 3:28pm)

Worked for me (at least, the online script said it accepted it.) - I wanted blah.org/something/mailer without cgi-bin or cgi in the URL. Many Web robots
avoid these strings and it's possible some harvesters do, too.
In fact, I like to add a suffix that corresponds to the MIME type, so that
if a script generates text/html it's xxx.html and if it generates image/jpeg it's xxx.jpg etc.
There's usually no need for the end user to know they are talking to a script. - it's
just ain invitation to hackers to look for an exploit.

Anyhow, I renamed the script to what I wanted before clicking "accept", which as I understand is what writes it to the PHP database