Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Use lynx to browse local files using a remote URL Web Browsers
Imagine having one of your webmaster friends over and showing them how easy it is to "hack" thier server from your 'all powerful' Mac. Just use lynx (available via Fink) and put in the server URL followed by a ../ path and you will be presented with a file system browsing interface!

It is actually showing your local filesystem for some reason, but for a simple scare it can be quite convincing -- took me for a four-hour loop on one of my own servers the other day! For example, I have my friend Rob (from MacOSXHints) over and open up a terminal window:
# ~> lynx www.macosxhints.com/../../../etc
lynx will now open up with a listing of the contents of the etc directory (mine not his, but at first glance you would think that it was his I had pulled up!). As far as I can tell this is a 'feature' of lynx, but I can't find any documentation as to why it exists.

[robg adds: If you want to browse your local filesystem the 'proper' way in lynx, just tell it to open file:///, and you'll be taken to the top-level of your machine's hard drive.]
    •    
  • Currently 1.00 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (2 votes cast)
 
[6,630 views]  

Use lynx to browse local files using a remote URL | 1 comments | Create New Account
Click here to return to the 'Use lynx to browse local files using a remote URL' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Use lynx to browse local files using a remote URL
Authored by: kirbysdl on Apr 26, '04 03:01:07PM

This is completely expected and correct (as far as the intentions of the developers go) behavior. Unless you specify a complete URL with the http:// header, lynx will always interpret that command line argument as a local location for it to open. If your webmaster friend knows lynx, he or she might not be fooled. ;)

off topic: You could be a bit trickier and edit your hosts file so that cnn.com pointed towards your local machine, then build a cnn lookalike site to host on your machine. This would make ANY local browser display your version of cnn.com. Might be fun to tell someone their birthday/anniversary made it to front page news. =)



[ Reply to This | # ]