
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
ftp2webdav
is an FTP server that forwards all uploaded files to a WebDAV server.
It was developed with the specific goal of retrofitting a Nextcloud interface into older
devices or software that exclusively support FTP upload for file transfer.
Caution: ftp2webdav
has not undergone security testing. Avoid exposing it to untrusted networks or the public
internet without implementing proper security measures.
pyftpdlib
underneath)Requires Python version 3.9 or higher and pip.
pip install ftp2webdav
To configure ftp2webdav
, a configuration file is required. By default, the program looks for it
in ~/.ftp2webdav.conf
or /etc/ftp2webdav
. Create a sample configuration file with:
ftp2webdav --create-example-config
---
ftp:
host: 127.0.0.1
port: 21
webdav:
host: webdav.host
port: 443
protocol: https
path: uri/path/to/webdav/endpoint
verify_ssl: True
cert: /path/to/cert
target_dir: path/to/target/dir/
ftp
):
host
: Specifies the FTP server's IP address or hostname.port
: Specifies the FTP server's port.webdav
):
host
: Specifies the hostname or IP address of the WebDAV server.port
: Specifies the port of the WebDAV server.protocol
: Specifies the protocol used for WebDAV communication.path
: Defines the URI path to the WebDAV endpoint.verify_ssl
: Boolean indicating whether to verify SSL certificates.cert
: Path to the (local) SSL certificate used for secure communication.target_dir
):
Run the server:
ftp2webdav
Log into the server using valid user credentials of the WebDAV sever, and then upload a file. The uploaded file will be automatically stored in the directory specified in the config file.
ftp2webdav
is distributed under the terms of the MIT License.
FAQs
An FTP server that forwards uploaded files to a WebDAV server
We found that ftp2webdav demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.