F
F
FSFox2011-12-18 02:39:28
Bots
FSFox, 2011-12-18 02:39:28

Strange in the logs on the site

Not so long ago, something strange began to appear in the logs of the site instead of identifying the browser.
Namely:
<?php system("id"); ?>

The geography of IP addresses from where this comes from is quite wide
(so far only 13 pieces in the ban village).

But the question is - what did they try to achieve?
And who else has such lines found in the logs?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
D
Dzuba, 2011-12-18
@FSFox

I have the same ones. There are only 7 posts so far.
The purpose of their visit seems to be obvious: they scan holes, look for vulnerabilities.
Requests:
/?mod=../../../../../../proc/self/environ
/?page=../../../../../../proc/self/environ
/?file=../../../../../../proc/self/environ

E
Evengard, 2011-12-18
@Evengard

foro.undersecurity.net/read.php?15,3768 In short ,
you are being scanned for local file inclusion

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question