
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
This drb-driver-ftp module implements ftp protocol access with DRB data model.
The module implements the factory model defined in DRB in its node resolver. Based on the python entry point mechanism, this module can be dynamically imported into applications.
The entry point group reference is drb.driver
.
The driver name is ftp
.
The factory class is encoded into drb.driver.ftp
.
The ftp signature id is d61c923a-5f1b-11ec-bf63-0242ac130002
The Ftp can be instantiated from an uri. The ParsedPath
class provided in drb core module can help to manage these inputs.
The project is present in https://www.pypi.org service. it can be freely loaded into projects with the following command line:
pip install drb-driver-ftp
DrbFtpNode
manages the ftp protocol to access remote data. The construction
parameter is an url with the host and an authentication object. Both FTP and FTPS are supported. They allow access the
ftp content.
from drb.drivers.ftp import DrbFtpNode
from requests.auth import HTTPBasicAuth
node = DrbFtpNode("URL", "HOST", auth=HTTPBasicAuth("username", "password"))
Ftp protocol allows navigation inside the ftp server. To do so this driver is able to provide children of the same FTP type.
FTP node is able to manage Basic authentication based on username and
password, as well as TLS ans SSL authentication by using the FTP_TLS.auth()
.
This method set up a secure control connection.
By default, the node will try to connect with the SSL protocol if you want to change protocol you have to give
You can find all the version of TLS and SSL supported here https://docs.python.org/3/library/ftplib.html#ftplib.FTP_TLS.ssl_version
None
The documentation of this driver can be found here https://drb-python.gitlab.io/impl/ftp
FAQs
DRB Ftp driver
We found that drb-driver-ftp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.