
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
ptftpd
Advanced tools
pTFTPd is a collection of tools related to TFTP. It includes a TFTP server, a TFTP client, and a complete PXE solution based on this TFTP server and a micro-DHCP or BOOTP server. All these tools are written in Python and designed to be fast, RFC compliant and easy to use.
Available tools include:
bootpd: a BOOTP server (RFC951 and RFC1497 compliant)dhcpd: a simple, stripped-down DHCP server.ptftpd: the TFTP server (RFC1350, 2347, 2348, 2349 and 7440 compliant)pxed: a one-call PXE server using dhcpd and ptftpd.ptftp: a simple TFTP client (RFC1350, 2347, 2348, 2349 and 7440
compliant and capable)They all support the --help option to present the usage summary to
the user.
All tools also understand the --rfc1350 option, which forces them in
basic TFTP RFC1350 compliance mode, disabling all TFTP extensions for
increased compatibility would you encouter any problem with your target
system.
pTFTPd is available on PyPI as the ptftpd distribution.
.. code::
$ pip install ptftpd
This will install the ptftplib Python package, as well as the scripts
listed above.
If you use the pTFTPd tool suite outside of a standard distribution
installation, you may need to specify the Python module search path with
PYTHONPATH before executing the binaries:
.. code::
$ export PYTHONPATH=`pwd`
$ bin/ptftp
Connected to localhost:69.
tftp>
The TFTP server, pTFTPd, fully supports the TFTP specification as defined in RFC1350. It also supports the TFTP Option Extension protocol (per RFC2347), the block size option as defined in RFC2348 and the transfer size option from RFC2349.
For help on how to use pTFTPd, type:
.. code::
$ ptftpd --help
The port used can be changed using the -p option. The root path is
given as a simple argument. For example, to serve /var/lib/tftp on
port 6969 through the eth0 network interface:
.. code::
$ ptftpd -p 6969 eth0 /var/lib/tftp
The TFTP client is an interactive client, just launch it and type
help to see the available commands:
.. code::
$ ptftp
tftp> help
...
The PXE system is also very easy to use. It takes three arguments: the
network interface to listen on, the TFTP root path from which to serve
files, and the PXE boot filename. It will automatically start a TFTP
server and a DHCP server to serve hosts on the given interface. See
--help for more details:
.. code::
$ pxed --help
Mechanics for using pxed.py with the BOOTP server are not yet in
place, but such a solution can easily be constructed manually by
starting the BOOTP server and the TFTP server manually:
.. code::
$ bootpd <interface> <PXE boot file> &
$ ptftpd <interface>
FAQs
pTFTPd, a pure-Python TFTP tool suite that works
We found that ptftpd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.