[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-wget] Re: WGet Help

From: David H. Lipman
Subject: [Bug-wget] Re: WGet Help
Date: Thu, 4 Jun 2009 20:47:21 -0400

From: "Joel" <address@hidden>

      |  I am trying to automate a file download, but the filename changes every
      time there is an update.
      I have attempted to use a wildcard * to make this easier, but I am
      getting an error.  Below is the situation:
      current file name:
      my download attempt:
      C:\wget>wget http://download.avg.com/filedir/inst/avg_ipw_stf_*.exe

--15::55:30--  http://download.avg.com:80/filedir/inst/avg_ipw_stf_%2A.exe
      |              => address@hidden'
      Connecting to download.avg.com:80... connected!
      HTTP request sent, awaiting response... 404 Not Found

15::55:31 ERROR 404: Not Found.

      |  Please let me know if I am doing something incorrectly.  If not, would
      it be possible to look into this?
      - Joel -

You can't use wildcards with HTTP, only FTP
I wish it could.  It would make harvesting malware easier to collect.

What you can do is what I do in my Multi AV Scanning Tool which uses the 
KiXtart scripting
language and the WGET utility.

Example 1:
McAfee uses what is called the SuperDAT.  This is an EXE file that contains the 
the McAfee
command line scanner engine and signature files.  A new EXE is posted daily and 
version number is incremented either daily of if there is a new, hot virus.

Today that file is;  sdat5636.exe
Tomorrow that file may be; sdat5637.exe

What I do is parse a known file, UPDATE.INI,  that will have the latest version 
number and
extract that version number.  From that I can get the URL and then pass the URL 
(FTP or
HTTP) to WGET and download the file.

Example 2:
Trend Micro has the Sysclean utility and packages the signatures for Sysclean 
in a ZIP
file.  That ZIP file has a version number associated with it and the version 
number is
incremented as new signatures are released.

What I do is use WGET to download the web page;
and save it in a text file.  I then pase the text file for the version number.

Actual snippet...

  shell "c:\AV-CLS\wget http://www.trendmicro.com/download/viruspattern.asp";
  copy "viruspattern.asp"   "pattern.txt"
  del "viruspattern.asp"
  $SearchString="the latest pattern file number"
  IF Open(1,"pattern.txt",2)=0
      if (INSTR($x,$SearchString))<>0
    del "pattern.txt"

The result will be the variable; $PatternFile1  will be the name of the file 
needed to be

I then call...
shell "c:\AV-CLS\wget 

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

reply via email to

[Prev in Thread] Current Thread [Next in Thread]