Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Code not easily searchable #4

Closed
vysecurity opened this issue Feb 19, 2023 · 2 comments
Closed

Code not easily searchable #4

vysecurity opened this issue Feb 19, 2023 · 2 comments
Labels
wontfix This will not be worked on

Comments

@vysecurity
Copy link

vysecurity commented Feb 19, 2023

Issue Description

The code was not easily identifiable, making it more difficult to maintain or identify areas for modification.

E.g.

b_ident = b"789CF3CBCC0DC849CC2B51703652084E2D2A4B2D02003B5C0650"

For some reason the Server header is encoded in hex. If it was in just plain text we could grep for the string and change it.


Improvement

Put the cleartext server header in the code instead of the hex representation because it's running on the server anyways.

Also, what was the reason to use base16 on it? It's unlikely anyone would run this on the target system with Python installed, so obfuscation isn't really necessary.

@chvancooten
Copy link
Owner

Hi Vincent, that Server header was encoded like that on purpose, exactly so that people can't just grep for it to change it 😉. Motivation being that people should actually go through the code at least a bit and make appropriate modifications before deploying.

Closing this as a won't-fix issue. Feel free to open a new issue or PR if you have any other suggestions!

@chvancooten chvancooten closed this as not planned Won't fix, can't repro, duplicate, stale Feb 19, 2023
@vysecurity
Copy link
Author

Got it!

@chvancooten chvancooten added the wontfix This will not be worked on label Feb 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

2 participants