Ami Express 2.0+ Shell Version 2.4 DOX !!! ------------------------------------------ *** NOTE: I am NO longer making AREXX doors to be supported on Ami 1.1x And yes there is still ANOTHER way around my shell that is fixed in this version So BUY Ami Express 2.0+ NOW! I will not make ANY exceptions. And when the doors are HARD CODED in C, then you will not be able to change them. Unless you want to "waste" your time and hack C code. Be my guest... I doubt you'll be able to "RE-STRUCTURE" whole code to allow it to run on Ami 1.1x- I'm getting tired of all these UPDATES myself. Hehe Advantages of THIS Shell.... ---------------------------- 1. Name Protection (Txt file contains list of Users ALLOWED to use the Shell) 2. DELETE Protection via PASSWORD (Sysop can change) List of files not to be deleted 3. RENAME Pretoction via PASSWORD (Sysop can change) List of files not to be renamed 4. FILE & Command Protection (List of Files/Commands not to be TOUCHED!!!!) 5. COPY Protection (List of files not to be copied) 6. Sysop can determine the COMMANDS available to use.. 7. Direct Zmodem Upload & Direct Batch Zmodem Downlod from Shell 8. Script Protection (via "s" flag) so no scripts can be executed by just typing in the script name. Execute still works..but more on that later. Disadvantages....(or MORE advantages) ----------------- 1. Hackers HATE this VERSION!!! 2. You tell me. Files & what they do -------------------- Shell-Env (Passwords for SHELL, DELETE, & RENAME Passwords. Sysop can change. Shell-Names (List of names of users ALLOWED to use the shell. Sysop can Change. Shell-Can (List of VALID commands a User is ALLOWED to use) Sysop can Change. Shell-NOT (List of INVALIDE FILES/COMMANDS not to be allowed) Sysop can Change. Shell-DEL_NOT (List of Files NOT ALLOWED to be deleted) Sysop can Change. Shell-REN_NOT (List of Files NOT ALLOWED to be renamed) Sysop can Change. Shell-COP_NOT (List of Files NOT ALLOWED to be copied) Sysop can Change. Shell24.Rexx (MAIN PROGRAM) Shell_INSTALL (EASY Step By Step Installation program) Required Dirs ------------- All files go in "DOORS:Shell/" Required CustomCommand Line --------------------------- *SHELL RM255DOORS:SHELL/SHELL24.REXX where 255 is the Security level. Change to any value you want. READ READ READ READ READ READ READ READ READ READ READ READ READ READ READ ========================================================================== What to include & WHY in each of the dirs... -------------------------------------------- File = Shell-Can ================ C:Type C:Dir C:List C:Rename C:Delete C:Copy C:Avail Why: Bcoz if a HACKER uploads a "CUSTOM" FORMAT command that he coded.. he still can't use it. EXAMPLE: Hacker Uploads a command called "FMT" which is an assembly program to perform a format on BBS: He could type... BBS:Warez/Upload/FMT and it would format your HD. This protects against this. File = Shell-Not =============== SHELL24.REXX SHELL-CAN SHELL-NOT SHELL-ENV SHELL-NAMES SHELL-DEL_NOT SHELL-REN_NOT SHELL-COP_NOT #? EXPRESS STARTUP-SEQUENCE USER-STARTUP CONFIG0 CONFIG1 CONFIG2 FORCE ALL QUICK DRIVE NAME INTER ZOOM USER.DATA USER.KEYS CUSTOMCOMMANDS Why: Shell files...You don't want a hacker to see your passwords. You don't him to DO ANYTHING to these files. Why: #? Bcoz he could do this COPY USER.#? BBS:Warez/Upload and then download it. or... DELETE BBS:#? Why: Startup-Sequence/User-Startup. Don't want a hacker to find your directories of HIDDEN COnfig files in your system. Why: CONFIGx Ya don't want him to get ahold of your "0" Password. But if you're running this Shell you don't need the 0 command. Just do *0 RM255Doors:Shell.Shell24.Rexx in the CustomCommands file Why: FORCE/ALL Bcoz of DELETE FORCE would delete "P" flagged files or DELETE BBS: ALL would also ruin your day. Why: DRIVE/NAME/QUICK In case there is a sys:format file renamed and uploaded This protects against this. Why: ZOOM if he can move file into zoom...he can download them as a message why: Customcommands Ya don't want to help him know what your SHELL command is really called. You could call it "CLI", "MYSHELL", etc... File = Shell-Names ================== Maltese Falcon why: So the sysop can determine who gets access to the shell This protects against backdoors that just gives access 255 under a fake name. File = Shell-DEL_NOT =================== This is left up to you. I don't have any in mine bcoz of the Shell-NOT. but this is incase you don't want a file deleted but it can be run, etc.. File = Shell-REN_NOT ==================== I recommend putting ALL the "SHELL-CAN" names into this file without the directory path ie. TYPE DELETE AVAIL why: Hacker could upload a "FMT" command then type... RENAME FMT TYPE TYPE and it would format your HD. File = Shell-COP_NOT ==================== I recommend putting ALL the "SHELL-REN_NOT" names into this file TOO! why: Hacker could upload a "FMT" program called TYPE then could COPY BBS:Warez/Upload/TYPE C: and then type... TYPE and it would format the BBS. ---------------------------------------------------------------------------- How to Use the Shell ---------------------------------------------------------------------------- When the Shell first starts. It Looks for "SHELL-ENV". If it DOES NOT find it then then Shell exits and tells the user to notify the Sysop. Next, the Shell looks for "SHELL-Names". If it DOES NOT find it, then the Shell exits and tells the user to notify the Sysop. Next, the shell ask for the "REMOTE PASWORD" in Shell-Env. If it does NOT match, then it exits Next, the shell checks to see if the User is allowed to use the shell via "Shell-Names" ***NOTE: Name in list must be 100% IDENTICAL as the user has his name. If the name is /X\aCk then you must put the name as "/X\aCk" in the Shell-Names file If all is well it enters in the Callerslog (if exists) and marks the time the user accessed the shell To exit the Shell type "ENDCLI" case does NOT matter!!! Some features ------------- DZ starts the Batch Zmodem Download (case not important) RZ starts the Zmodem Upload (case not important) CD Change Directory...EXAMPLES: BBS:AMIGA/UPLOAD at the prompt would put you in "BBS:AMIGA/UPLOAD" RAM: at the prompt would put you in "RAM:" If you are in BBS:AMIGA dir already and type UPLOAD it WILL NOT put you in the directory of BBS:Amiga/Upload. Now you must use the CD Upload. CD / will back you out to the previous DIR. Special Thanx to ByteMaster for providing the Zmodem code... Special Thanx goes to the Hacker who formatted my HD, & inspired me. Just a laugh at him...He only got my SYS: partition and I just reinstalled WB2.04 Hehehehe Hahahahaha Hohohohohoho Hehehehehehe 8^) If there are any bugs....Please send em to Mass Media 301-871-5579/301-871-5597 That's it for now! Later m8s