LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-09-2008, 12:57 AM   #1
phparion
LQ Newbie
 
Registered: Jun 2008
Posts: 4

Rep: Reputation: 0
monitor the internet communication of a php site


Hi

I want to try a php based software. It is encrypted and I am scared, it might send out important information to the software vendor site(s)

Since the code is encrypted so i cannot check the code to verify this. I wanted to install some tool or use any command which can show me if the software sends / calls any third party site anywhere in the software.

please advise me on this.

thank you
 
Old 07-09-2008, 09:56 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
You could load it in a Virtual machine or isolated physical machine with Netfilter blocking traffic plus 0) "-j LOG" rules or 1) a packet sniffer like tcpdump or 2) the network disabled (hoping it will complain) or 4) preloading some proxy like Dante or route all traffic through a proxy. Since this could be a commercial product (which one, details?) in-depth debugging might be a valid option but against the license.
 
Old 07-09-2008, 03:14 PM   #3
simonapnic
Member
 
Registered: Jul 2008
Posts: 70

Rep: Reputation: 16
Post

Just run Wireshark if you have a graphical interface on the box and see what it does.
[MODERATED]

Last edited by unSpawn; 07-09-2008 at 03:38 PM.
 
Old 07-09-2008, 03:42 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Moderator note

Quote:
Originally Posted by simonapnic View Post
[MODERATED]
As I said in my reply there will be no hinting at debugging.
 
Old 07-09-2008, 11:27 PM   #5
phparion
LQ Newbie
 
Registered: Jun 2008
Posts: 4

Original Poster
Rep: Reputation: 0
Thank you guys for your replies. I do not want to debug / steal any code from the software. The software company is not scared of that either. I have written my own software which is far better than this one. The only thing is that one of our client wants it to be installed on his VPS (whm/cpanel) to track his PPC sales. The problem is that most of the people think this software steals keywords lists and CTR information from customers and load it to the company site for their use. So I am not after stealing any code from the software but to avoid any possible theft of important information from my client.

Anyway, I have decided to install it on a internet-less machine and check all features, if it does communicate with company site, it will break on those part of the software.

thank you!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Are PHP session variables held in memory when you leave a PHP site? Locura Programming 11 11-16-2008 08:37 PM
Site to Site VPN - Internet browsing bence8810 Linux - Networking 2 04-19-2008 11:56 AM
PHP - JAVA Communication stranger_6_7 General 1 03-14-2008 04:20 AM
communication of PHP ,MySQL and apache server shweta Linux - Server 1 08-14-2006 10:37 AM
Monitor inter process communication across ports chtaylo3 Programming 0 07-12-2006 03:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration