[SLUG] Execution via email ?
are there any scripts to allow execution of an arbitrary commands via email, with the output via return email ? Or, request a file that is then sent via email ? Voytek -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
On Sat Jun 11, 2005 at 17:16:00 +, Voytek wrote: >are there any scripts to allow execution of an arbitrary commands via email, >with the output via return email ? Or, request a file that is then sent via >email ? > procmail? -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
Voytek wrote: are there any scripts to allow execution of an arbitrary commands via email, with the output via return email ? Or, request a file that is then sent via email ? Voytek with the usual disclaimer about what a bad idea this is: man smrsh Restricted Shell for Sendmail Fil -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
Reading the subject of your mail gave me hillarious images of people being maimed by their computers after receiving mallicious spam :-) Voytek wrote: are there any scripts to allow execution of an arbitrary commands via email, with the output via return email ? Or, request a file that is then sent via email ? Voytek -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
RE: [SLUG] Execution via email ?
Believe it or not, in days when the Internet wasn't quite grown up (early 90's of last century) some people only had email access to the internet. There were actually mail servers setup that you could email an instruction which would 1. ftp download the file 2. break it up into little bits 3. ASCII encode it (probably uuencode, a bit like base64) 4. And then send the bits as separate emails (of course the little bits was to get over restrictions in email size that a lot of people had) You could then download your email and I think then run a script to reassemble the file. (Come to think of it the emails might even have been a shell script - like a shell archive). When I worked at my previous employer I used this a few times to get a file that I just had to have overnight, but that I couldn't sit around and wait for. Martin Visser, CISSP Network and Security Consultant Consulting & Integration Technology Solutions Group - HP Services 410 Concord Road Rhodes NSW 2138 Australia Mobile: +61-411-254-513 Fax: +61-2-9022-1800 E-mail: martin.visserAThp.com This email (including any attachments) is intended only for the use of the individual or entity named above and may contain information that is confidential, proprietary or privileged. If you are not the intended recipient, please notify HP immediately by return email and then delete the email, destroy any printed copy and do not disclose or use the information in it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Voytek Sent: Sunday, 12 June 2005 3:16 AM To: slug@slug.org.au Subject: [SLUG] Execution via email ? are there any scripts to allow execution of an arbitrary commands via email, with the output via return email ? Or, request a file that is then sent via email ? Voytek -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
Found this whilst reading about 'iPod slurping' and remembered this thread. http://www.sharp-ideas.net/archives/49.html "The premise of RPC-Mail is simple. Construct an e-mail message that has a command that you want one of your remote PCs to execute. Send the e-mail to a special account that is only used by RPC-Mail. Have the remote PC set up with a scheduled task or cron job to periodically execute the application RPC-Mail.py. When RPC-Mail.py executes, it parses all of the subject lines and message bodies of e-mail messages that it finds. If the message body contains a special passphrase, RPC-Mail executes the subject line as a command, and returns standard output as an e-mail message." Might be of use to you. Cheers, Rob. On 6/15/05, Visser, Martin <[EMAIL PROTECTED]> wrote: > Believe it or not, in days when the Internet wasn't quite grown up > (early 90's of last century) some people only had email access to the > internet. There were actually mail servers setup that you could email an > instruction which would > > 1. ftp download the file > 2. break it up into little bits > 3. ASCII encode it (probably uuencode, a bit like base64) > 4. And then send the bits as separate emails (of course the little bits > was to get over restrictions in email size that a lot of people had) > > You could then download your email and I think then run a script to > reassemble the file. (Come to think of it the emails might even have > been a shell script - like a shell archive). > > When I worked at my previous employer I used this a few times to get a > file that I just had to have overnight, but that I couldn't sit around > and wait for. > > > Martin Visser, CISSP > Network and Security Consultant > Consulting & Integration > Technology Solutions Group - HP Services > > 410 Concord Road > Rhodes NSW 2138 > Australia > > Mobile: +61-411-254-513 > Fax: +61-2-9022-1800 > E-mail: martin.visserAThp.com > > This email (including any attachments) is intended only for the use of > the individual or entity named above and may contain information that is > confidential, proprietary or privileged. If you are not the intended > recipient, please notify HP immediately by return email and then delete > the email, destroy any printed copy and do not disclose or use the > information in it. > > > -----Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Voytek > Sent: Sunday, 12 June 2005 3:16 AM > To: slug@slug.org.au > Subject: [SLUG] Execution via email ? > > are there any scripts to allow execution of an arbitrary commands via > email, with the output via return email ? Or, request a file that is > then sent via email ? > > Voytek > > -- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html > -- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html > -- Rob Sharp email/jabber: [EMAIL PROTECTED] web: http://sharp.id.au pgp: 0E2C C63B BA04 DEB4 7CC0 84FD 17E3 6AA4 87FB 62DF -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
On Tue, 21 Jun 2005, Rob Sharp wrote: > Found this whilst reading about 'iPod slurping' and remembered this thread. > > http://www.sharp-ideas.net/archives/49.html > > "The premise of RPC-Mail is simple. Construct an e-mail message that > has a command that you want one of your remote PCs to execute. Send > the e-mail to a special account that is only used by RPC-Mail. Have > the remote PC set up with a scheduled task or cron job to periodically > execute the application RPC-Mail.py. When RPC-Mail.py executes, it > parses all of the subject lines and message bodies of e-mail messages > that it finds. If the message body contains a special passphrase, > RPC-Mail executes the subject line as a command, and returns standard > output as an e-mail message." > > Might be of use to you. You mean like uux from the UUCP suite? Vaguely remember something like this:- $ uux 'remote.host.name.com.au!netstat -ln' In the beginning there was cp, then there was uucp (Unix-to-Unix copy) via serial port & analogue modems, then there was TCP/IP mid 1970's, then there was UUCP over TCP/IP, then there was SMTP in the mid 1980's. UUCP was fully redundant, could handle push or pull from either end, was transactional and you always knew whether the mail/files got there or not and exactly what went on with remote execution. I would say RPC via UUCP would be an excellent choice for intermittent links. We used it for EDI gateways at Corporate Express (ie transfer of all orders and invoices to/from the mainframe). I think they've now stepped up to building a proper RPC type interface as it became necessary for more real-time interaction - but that required significant effort. If you want your system hacked however, consider this in /etc/aliases yourname: | grep ^Subject: | cut -c8- | bash Note that most default sendmail installations will at least whinge about this (at least the ones released this century). -- -- Grant Parnell - SLUG President EverythingLinux services - the consultant's backup & tech support. Web: http://www.elx.com.au/support.php We're also busybits.com.au and linuxhelp.com.au and everythinglinux.com.au. Phone 02 8756 3522 to book service or discuss your needs or email us at paidsupport at elx.com.au ELX or its employees participate in the following:- OSIA (Open Source Industry Australia) - http://www.osia.net.au AUUG (Australian Unix Users Group) - http://www.auug.org.au SLUG (Sydney Linux Users Group) - http://www.slug.org.au LA (Linux Australia) - http://www.linux.org.au -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Execution via email ?
My solution to this is to have procmail send all emails with the subject line "I Only Fish for Herring on Wednesdays" to my inbox which is periodically scrutinized by a cron bash script. If the body of the message is "WAWWO o6Hea 1SqG4 NHfJI FCU0s NxJeW" (the one-time message changes daily) then bash does its duty. Probably not secure but it gives me a warm and fuzzy feeling. Robert Thorsby -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
