
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
An FTP server that pushes uploaded files directly to a HTTP URL.
Think of ftp2http as a simple FTP layer that sits before a HTTP server.
| An FTP client connects to an ftp2http server and uploads a file. The ftp2http | server immediately uploads that file to the configured HTTP URL.
| The server directory always appears empty to the client, even after a file has | been uploaded. This is because uploaded files are only sent to the HTTP server, | not stored.
Install ftp2http by using pip, a tool for managing Python packages.
#. Run pip install ftp2http
#. Create a configuration file at /etc/ftp2http.conf
ftp2http
| We use circusd to manage the ftp2http process. An example configuration has | been provided in the examples directory.
| Authentication can be checked against user accounts specified in the | configuration file, or by configuring an authentication backend URL.
| A specific configuration format is used, which can be generated using
the
| ftp2http -a
command.
Example:
::
$ ftp2http -a
Enter a username: dogman
Enter a password:
Confirm password:
Add the following line to your configuration file.
user: dogman:$2a$12$5NyFA4AbEfmZiexG62qIieBu/isqwTYnta8H9gH5zC0lCRVKyMrc.
| FTP login authentication can be performed via HTTP requests, using HTTP basic | authentication. Set one or more authentication_backend entries in the | configuration file, and then ftp2http will perform requests to check the FTP | login details. Login details are accepted if an authentication_backend URL | returns a 2xx response.
| File uploads themselves can also use HTTP basic authentication. By enabling | http_basic_auth in the configuration file, ftp2http will reuse the FTP | login details for HTTP basic authentication when sending uploaded files | to the target URL.
FAQs
FTP to HTTP server
We found that ftp2http demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.