Some common commands for rsync

The penetration test will encounter rsync anonymous access

Rsync is often encountered when testing some large-scale internet.

What is rsync
Rsync (remote synchronize) is a data synchronization tool that allows you to quickly sync files between multiple hosts via Lan/wan. Rsync uses the so-called "rsync algorithm" to synchronize files between local and remote two hosts, which transmits only the different portions of two files, rather than the entire transfer every time, so it is quite fast.

There are many examples of rsync on Wooyun, but there is no general introduction about how he uploads and downloads.

Today, I met a rsync that allows anonymous access and does not require a password. have permission to upload and download, by the way to share with you, encountered a similar problem when the hope can help to cheese. If you already know, you also want to share some of the more commonly used rsync techniques.

Rsync 192.168.100.1:: Column module. Basis for reference prior to sleepy Dragon finishing: http://drops.wooyun.org/papers/161

Instance:
http://wooyun.org/bugs/wooyun-2010-034704

http://wooyun.org/bugs/wooyun-2010-034232

If you have permission, it's probably like this:


Then go in:


If you want to download it after you go in. Then you can use the following command:
Rsync-av [email protected]::d bback/tmp/root

The front is the access module, followed by saving the contents of the module to the/tmp/root directory.

If you want to upload a file. The
rsync-av/tmp/root/1.php [email protected]::d bback If the/tmp/root directory has a 1.php.

For more detailed commands, refer to: http://blog.163.com/wang_hai_fei/blog/static/30902031201131132738331/

Some common commands for rsync