
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
npm i rsh-ws -g
rsh-ws
来启动服务0O0P5D99
,前4位是端口号码,后4位是连接密码,端口号码请使用36进制解析,在这个例子中,端口号码是31129
WebSocket
连接ws://ip:31129
,如果是本机,ip可以为127.9.9.9
5D99
,你可以发送JSON命令{
"do": "login",
"passwd": "5D99"
}
来登录
{
"do": "createTerminal",
"cwd": "./", //终端目录
}
返回值中有 data.pid
参数,用来标识终端
7. 发送命令
{
"pid": "<pid>",
"do": "write-to-terminal",
"data": "ls"
}
这会向终端的stdin
写入data
8. 返回命令结果
格式为
{
"status": "ok",
"data": {
"type": "Received data",
"data": "<data here>"
}
}
rsh-ws
版本{
"do": "get-version"
}
返回结果
{
"status": "ok",
"data": {
"type":"version",
"version": "<version here>"
}
}
{
"do": "file-operation",
"path": "<path here>"
}
将会返回
{
"status": "ok",
"data": {
"port": "<port here>",
"file_id": "<file_id here>",
"path": "<path here>"
}
}
文件传输使用HTTP协议
支持以下方法
GET
http://ip:port/<file_id>
下载文件,响应数据为文件内容PUT
http://ip:port/<file_id>
上传文件,Body负载为文件内容DELETE
http://ip:port/<file_id>
删除文件port
请使用返回数据中的port
FAQs
远程外壳,使用WebSocket连接
The npm package rsh-ws receives a total of 2 weekly downloads. As such, rsh-ws popularity was classified as not popular.
We found that rsh-ws demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.