Re: Get QSH exit status

Hello,

Am 22.02.2020 um 22:31 schrieb B Stone <bvstone@xxxxxxxxx>:

Should get it running on an IBM i. :) If they did get in the hacker would
be like "what kind of code is this? What the heck is LR?" lol

I know you wanted to make a funny remark. But…

Unfortunately, most websites today are built to be put together dynamically, from content of a database and maybe static text, as well as IMG SRCs to some files on disk. Most often, this is done by PHP nowadays. Even on IBM i, the inrush of "common" stuff being run in PASE, like PHP, creates all new security nightmares. From the view of an attacker, it looks as there's a crude UNIX-like something. So, no "what kind of code is this". More like "What dammit old version of Drupal/Wordpress/whatever is this?".

(On a side note, I'm more and more attracted by the thought that in the 1990's, when people had Page Mill, Dreamweaver or just some knowlege and a text editor, that was a good thing, from a security viewpoint. Create content somewhere and upload just static files. No security problems whatsoever. Will never be one of that one-shot-paid-forgot Website infected with who-knows-what because today everybody is running after some CMS. Which often shows only static content anyway, because it is never changed in the database.)

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc