It's maybe more a bash oriented question, but it deals with security.
So I'm trying to download a binary (nc) from a remote machine that I can access using Php (and shell_exec function), I looked for wget and found it in /usr/ports/ftp/ repository, with the following rights:
drwxr-xr-x 3 root wheel 512 Dec 27 2013 wget
So, as you can see everybody should be abble to execute this. So, I did the following with shell_exec:
<?php $output = shell_exec("/usr/ports/ftp/wget"); echo "<pre>$output</pre>"; ?>
But when I executed this script via the server nothing append, which is strange because shell_exec(ls"); works (it can see the stdout of it) and "ls" binary which is in /bin as exaclty the same rights
Any suggestion ?
p.s: all of this happens in a training lab of course
This looks like a BSD machine - /usr/ports/ftp/wget is a directory (see the d in the modes of the ls output). wget is not actually installed on that machine, I suspect, and you're trying to execute a directory.
Try fetch (/usr/bin/fetch) instead.