Web Application Security
putting files with PUT Dec 23 2010 01:03PM
Robin Wood (robin digininja org) (1 replies)
Re: putting files with PUT Dec 23 2010 11:16PM
Tasos Laskos (tasos laskos gmail com) (1 replies)
You need to enable "mod_dav" first which allows for that sort of
functionality and then enable PUT for the directories you want -- or the
root dir to take care of all of them.

Then you can test it with curl like so:
http://www.agavemountain.com/2007/09/http-get-post-and-put-with-curl.htm
l

Cheers,
Tasos L.

On Thu, 2010-12-23 at 13:03 +0000, Robin Wood wrote:
> On a couple of tests recently Nessus has picked up that web servers
> have had the PUT method enabled and has demonstrated it by putting a
> file then deleting it again. I'm trying to set this up in my lab but
> the only way I can find to enable PUT on Apache2 is to have it pass
> the data to a PHP script which then process it from stdin. When I try
> to send data it seems to expect the data in the same format as a POST
>
> Is there a way to get Apache2 to emulate what I'm seeing on a test
> where the data entered is just dropped into a file in the document
> root?
>
> This is the first time I've looked at PUT so if I've got the concept
> wrong in some way let me know.
>
> Robin
>
>
>
> This list is sponsored by Cenzic
> --------------------------------------
> Let Us Hack You. Before Hackers Do!
> It's Finally Here - The Cenzic Website HealthCheck. FREE.
> Request Yours Now!
> http://www.cenzic.com/2009HClaunch_Securityfocus
> --------------------------------------
>

This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now!
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------

[ reply ]
Re: putting files with PUT Dec 24 2010 10:43AM
Ryan Dewhurst (ryandewhurst gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus