SFTP4TC based on PuTTY

Discuss and announce Total Commander plugins, addons and other useful tools here, both their usage and their development.

Moderators: Stefan2, white, sheep, Hacker

jtsn
Junior Member
Junior Member
Posts: 5
Joined: 2014-12-14, 05:51 UTC

Post by *jtsn » 2014-12-14, 07:08 UTC

bebbo wrote:VERSION 1.4.63.6 [2014-12-03]
Secunia PSI detects psftp64.dll as insecure/vulnerable. Looking at the plugin source code, I see, it uses PuTTY 0.63, which is not vulnerable.

So it looks like a false positive, caused by the mixed-up version info (0.0.0.0) of the DLL. It seems there was something gone wrong compiling PuttyLib.rc, because the DLL version should read 1.4.63.6, but it doesn't.

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2014-12-14, 11:09 UTC

jtsn wrote:
bebbo wrote:VERSION 1.4.63.6 [2014-12-03]
Secunia PSI detects psftp64.dll as insecure/vulnerable. Looking at the plugin source code, I see, it uses PuTTY 0.63, which is not vulnerable.

So it looks like a false positive, caused by the mixed-up version info (0.0.0.0) of the DLL. It seems there was something gone wrong compiling PuttyLib.rc, because the DLL version should read 1.4.63.6, but it doesn't.
The version info is present:

Image: http://bejy.net/psftp64.png

The value in the assembly is 0.0.0.0 - as in putty.exe.
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

jtsn
Junior Member
Junior Member
Posts: 5
Joined: 2014-12-14, 05:51 UTC

Post by *jtsn » 2014-12-15, 09:56 UTC

I got my sftp4tc build from there:

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_63_6.zip/download

SHA256 checksum of my wfx_sftp_1_4_63_6.zip is a21a8de5b610869e4605a0ed20da3130a2fb24b6fe3ca6bc7c56d15f2733dc, file size is 703530 bytes.

SHA256 checksum of the included psftp64.dll is 10fd28991f77f32d1f53bb0acbb1b5a8cd9ddb4a2f35414a3356b503bac09d77, file size is 568832 bytes.

This is what it looks like:

Image: http://666kb.com/i/cue86fgq6vrkrzk3q.png

Verified using the Lister, this version info is indeed at file offset 0x8836A

Image: http://666kb.com/i/cue8apanais071952.png

The non 64 bit psftp.dll is affected, too.

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2014-12-15, 10:31 UTC

jtsn wrote:I got my sftp4tc build from there:

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_63_6.zip/download

SHA256 checksum of my wfx_sftp_1_4_63_6.zip is a21a8de5b610869e4605a0ed20da3130a2fb24b6fe3ca6bc7c56d15f2733dc, file size is 703530 bytes.

SHA256 checksum of the included psftp64.dll is 10fd28991f77f32d1f53bb0acbb1b5a8cd9ddb4a2f35414a3356b503bac09d77, file size is 568832 bytes.

This is what it looks like:

Image: http://666kb.com/i/cue86fgq6vrkrzk3q.png

Verified using the Lister, this version info is indeed at file offset 0x8836A

Image: http://666kb.com/i/cue8apanais071952.png

The non 64 bit psftp.dll is affected, too.
The checksum are correct.

The VERSION_INFO starts at offset 0x84696. There you will find the FileVersion 1.4.63.6.
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

User avatar
sqa_wizard
Power Member
Power Member
Posts: 3364
Joined: 2003-02-06, 11:41 UTC
Location: Germany

Post by *sqa_wizard » 2014-12-15, 20:53 UTC

I have downloaded the zip file right now from the same link, but it displays a different version info on Win7 64-bit:

psftp64.dll

Code: Select all

Version language : Englisch (USA)
      CompanyName	:  
      FileDescription	: PuTTY's SFTP for TotalCommander's SFTP plugin
      FileVersion	: 1.4.63.6
      InternalName	: psftp
      OriginalFilename	: psftp.dll
      ProductName	: psftp
      ProductVersion	: 1.4.63.6
Are you sure, that you are using the original files of the zip file?
#5767 Personal license

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2015-11-23, 11:08 UTC

VERSION 1.4.63.7 [2015-11-20]

*FIXED #8 reconnect an expired session could cause a crash
+ADDED if the connection is broken, one attempt to reconnect is done immediately

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_63_7.zip/download

Bebbo
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2016-01-16, 14:53 UTC

VERSON 1.4.63.8 [2016-01-15]
*FIXED #9 Automatically establish a connection on navigation to \\Secure FTP Connections\SOMENAME

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_63_8.zip/download

Bebbo
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

jval
New Member
New Member
Posts: 1
Joined: 2016-04-15, 11:08 UTC

Empty folder

Post by *jval » 2016-04-15, 11:20 UTC

If folder on remote side is empty, i cant open it.

Some tips? Thank you.

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Re: Empty folder

Post by *bebbo » 2016-04-15, 11:54 UTC

jval wrote:If folder on remote side is empty, i cant open it.

Some tips? Thank you.
Uhm, I can't reproduce this behaviour.

* Do you have the permission to open that folder?
* Is there something special with the folder name?
* What encoding is used? (utf-8? )

And please open tickets here: https://sourceforge.net/p/sftp4tc/tickets/
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2016-04-16, 18:21 UTC

VERSON 1.4.63.9 [2016-04-16]
*FIXED #10 Handle missing "." in ls response for empty folders.

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_63_9.zip/download

Bebbo
_________________
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2016-12-04, 22:12 UTC

VERSION 1.4.67.1 [2016-12-02]
* Updated to PuTTY 0.67.
* Added features like sshecc from development branch.

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_67_1.zip/download

Bebbo
Last edited by bebbo on 2016-12-05, 18:47 UTC, edited 1 time in total.
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

bebbo
Junior Member
Junior Member
Posts: 52
Joined: 2009-06-24, 08:22 UTC

Post by *bebbo » 2016-12-05, 18:47 UTC

VERSION 1.4.67.2 [2016-12-03]
* FIXED #13 proxy connects are working again.

http://sourceforge.net/projects/sftp4tc/files/wfx_sftp_1_4_67_2.zip/download

Bebbo
SFTP4TC - sftp based on PuTTY
report tickets at https://sf.net/p/sftp4tc/tickets
ZSTDWCX - zstd packer http://franke.ms/packer/zstd.wiki

Cooperdale
Junior Member
Junior Member
Posts: 66
Joined: 2008-09-08, 23:03 UTC

Post by *Cooperdale » 2017-04-08, 17:36 UTC

Hello, can someone clarify one thing for me about this plugin.
It is very useful, but I thought it would also allow me to recall a Putty console from inside TC, mostly like WinSCP does. Did I get this wrong? I can't find much documentation about the plugin.

Thanks.

User avatar
MVV
Power Member
Power Member
Posts: 8087
Joined: 2008-08-03, 12:51 UTC
Location: Russian Federation

Post by *MVV » 2017-04-08, 17:44 UTC

I'm not aware of console support in this plugin, I always use PuTTY for console and this plugin for file transfer, and I like that both use shared saved connections.

Cooperdale
Junior Member
Junior Member
Posts: 66
Joined: 2008-09-08, 23:03 UTC

Post by *Cooperdale » 2017-04-08, 18:38 UTC

Ok, thanks.

Post Reply