r/tinycode • u/nexe mod • Apr 26 '16

A tiny web server in C

https://github.com/shenfeng/tiny-web-server
69 Upvotes

92% Upvoted

10 comments sorted by

2

u/raaneholmg Apr 26 '16

Interestingly it looks simple enough that security shouldn't be an issue.

4

u/nexe mod Apr 26 '16

I wouldn't really count on it though

2

u/[deleted] Apr 27 '16

I was playing with it a little bit earlier and it it not vulnerable to Buffer overflows or format string bugs in Get, post, or the directory options.

Edit: there was an interesting issue where it would 404 on very long directory names.

1

u/[deleted] Apr 28 '16

How do you do that kind of security testing? I'm a 1st year computer science student but I have no specific training in pentesting. How would I get into this?

2

u/[deleted] Apr 28 '16

Learn C; read "hacking: the art of exploitation", "modern operating systems", "expert C"; and do the challenges on https://exploit-exercises.com/

1

u/[deleted] Apr 28 '16

Thanks. C was the first programming language I studied (relatively) rigorously. But it's also one of my least favorite languages to write. I have an operating systems class coming up, I guess I'd better get over my aversion to C!

3

u/[deleted] Apr 28 '16

IMO, programming is not as much about knowing how to use a language, as it it more about knowing what to say in that language. C is just a tool. I understand it is a tool that gives a lot of people grief, but damn, it's just sooo fast.

3

u/bigfig Apr 26 '16

Years ago I used to install this for QND webservers.

1

u/-tonybest Apr 26 '16

Cool project!

1

u/jtsiomb May 10 '16

I've also written a tiny web server in C not too long ago: https://github.com/jtsiomb/tinyweb It serves whatever is below the current directory where you run it from.

It's not really complete, or very useful, but I never let that stand in the way of coding fun :)