Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Read-only mode #3

Open
vient opened this issue Feb 19, 2020 · 7 comments · May be fixed by #21
Open

Read-only mode #3

vient opened this issue Feb 19, 2020 · 7 comments · May be fixed by #21
Assignees
Labels
enhancement New feature or request

Comments

@vient
Copy link

vient commented Feb 19, 2020

Hi! As name suggests, I think it would be nice to have a --read-only/--no-upload/... switch that disables the upload functionality. What do you think?

@pollev
Copy link

pollev commented Feb 19, 2020

First thing I thought of when looking at this. I would go a step further and make the read-only mode the default.

Considering that this is going to be used in a pentester context, it seems reasonable to assume that at some point someone might find a path traversal issue or similar exploit and in that case you don't want people to have upload capabilities when they might not even be using them.

Personally I would feel much more comfortable with a default read only that I can quickly kill, add a flag and restart as a read/write for my work.

@sc0tfree sc0tfree added the enhancement New feature or request label Feb 19, 2020
@sc0tfree
Copy link
Owner

Will look into this for next major release. Thanks for your input!

@surbo
Copy link

surbo commented Feb 20, 2020

I would like to see this as well. Temp work around I am using is to comment out upload functions in "/usr/local/lib/python3.6/dist-packages/updog/templates/home.html"

@perfecto25
Copy link

is there a way to run this like SimpleHTTPServer, basically open a port and report any HTTP calls, but not share any directories?

@sc0tfree
Copy link
Owner

is there a way to run this like SimpleHTTPServer, basically open a port and report any HTTP calls, but not share any directories?

I think that might be a job for netcat. Maybe you can tell me more about your use case?

@CalfCrusher
Copy link

would be awesome a --no-upload , waiting for next release, anyway it's a fantastic tool

@patrickhener
Copy link

This one can do it: https://github.com/patrickhener/goshs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

8 participants