SitePoint Sponsor

User Tag List

Results 1 to 3 of 3
  1. #1
    chown linux:users\ /world Hartmann's Avatar
    Join Date
    Aug 2000
    Location
    Houston, TX, USA
    Posts
    6,455
    Mentioned
    11 Post(s)
    Tagged
    0 Thread(s)

    Article in 2600.....

    I was at the local magazine store and saw a copy of 2600 (the Hacker Quarterly). So I picked it up and started flipping through it to see if there was anything interesting and I came upon an article about hacking PHP pages. I read the article and when I was done I sat there for a second and realized that some of these people are more stupid than they seem. Basically the article stated that all PHP pages pass their variables through the URL.... And that by changing values in the string you can hack all PHP pages that you come across. I don't know about all of you but I never pass important information through the URL (ie. passwords, usernames, etc.). The article also stated some of the weaknesses of some of the mailing list scripts written in PHP. The writer suggested that since you have to respond to an e-mail to be added to the list you could flood the server..... Well a good PHP programmer would know to check the database to see if the user exsisted before they sent them another e-mail!

    People are actually going to believe this stuff and try hacking PHP pages.... HAHA!!

    Just a little tidbit and petpeeve of mine....

  2. #2
    SitePoint Wizard
    Join Date
    Jul 1999
    Location
    Chicago
    Posts
    2,629
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I scanned it so everyone can read it:
    http://aboutpcs.com/2600.gif (96k)

    It's an interesting read, although not completely true, as you said. Still, there are some scripts that are vulnerable.

  3. #3
    ComDude CryingWolf's Avatar
    Join Date
    Dec 2000
    Location
    I don't know the cat drug it in!!!
    Posts
    247
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    On the subject of hackers check this out (sorry about the long post)

    Code:
    [Sat Jun 23 10:09:04 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cfdocs/
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cfide/Administrator/startstop.html
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cfappman/index.cfm
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] attempt to invoke directory as script: d:/program files/apache group/apache/cgi-bin
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/dbmlparser.exe
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/webdist.cgi
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/handler
    [Sat Jun 23 10:09:05 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/wrap
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/pfdisplay.cgi
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/machineinfo
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/mall_log_files/order.log
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/pdg_cart/
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/quikstore.cfg
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/orders/
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/admin_files/order.log
    [Sat Jun 23 10:09:06 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/bigconf.cgi
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cgi-local/
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/htbin/
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cgibin/
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cgis/
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/cgi/
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/flexform.cgi
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/flexform
    [Sat Jun 23 10:09:07 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/lwgate
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/lwgate
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/lwgate.cgi
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/lwgate.cgi
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/perlshop.cgi
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/download.cgi
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/bnbform.cgi
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/bnbform
    [Sat Jun 23 10:09:08 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/rwwwshell.pl
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/nlog-smb.pl
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/wwwboard
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/wwwboard/
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/wwwboard.pl
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/logs/
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/cachemgr.cgi
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] client denied by server configuration: d:/program files/apache group/apache/htdocs/.htaccess
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] client denied by server configuration: d:/program files/apache group/apache/cgi-bin/.htaccess
    [Sat Jun 23 10:09:09 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/.wwwacl
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/.wwwacl
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/docs/
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/users/root/
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/ws_ftp.ini
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/ws_ftp.ini
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/ws_ftp.ini
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/ws_ftp.ini
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/ax-admin.cgi
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/axs.cgi
    [Sat Jun 23 10:09:10 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/responder.cgi
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/w3-sql
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/search97.vts
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/unlg1.1
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] couldn't spawn child process: d:/program files/apache group/apache/cgi-bin/test-cgi
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] couldn't spawn child process: d:/program files/apache group/apache/cgi-bin/test-cgi
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/campas
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/www-sql
    [Sat Jun 23 10:09:11 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/w3-msql
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/view-source
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/add_ftp.cgi
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/whois_raw.cgi
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/webcart/
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/webcart-lite/
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/count.cgi
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/count.cgi
    [Sat Jun 23 10:09:12 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/nph-test-cgi
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/webgais
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/websendmail
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/bb-hist.sh
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/bb-dnbd/
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/faxsurvey
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/htmlscript
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/aglimpse
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/man.sh
    [Sat Jun 23 10:09:13 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/architext_query.pl
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/filemail.pl
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/filemail
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/jj
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/info2www
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/nph-publish
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/anyform2
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/anyform
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/textcounter.pl
    [Sat Jun 23 10:09:14 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/wwwthreads
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/wwwthreads/
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/classified.cgi
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/classifieds.cgi
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/classifieds
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/survey.cgi
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/survey
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/environ.cgi
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/session
    [Sat Jun 23 10:09:15 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/finger
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/finger.pl
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/finger.cgi
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/maillist.pl
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/sh
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/bash
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/ash
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/tcsh
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/ksh
    [Sat Jun 23 10:09:16 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/csh
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/rksh
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/rsh
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/zsh
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/perl
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/test-cgi.tcl
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/php/
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/mlog.phtml
    [Sat Jun 23 10:09:17 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/mlog.phtml
    [Sat Jun 23 10:09:18 2001] [error] [client 207.33.111.32] File does not exist: d:/program files/apache group/apache/htdocs/mylog.phtml
    [Sat Jun 23 10:09:18 2001] [error] [client 207.33.111.32] (2)No such file or directory: script not found or unable to stat: d:/program files/apache group/apache/cgi-bin/mylog.phtml
    Looks like he ran a script and did this in less than a minute. Actually less then 15 seconds. So this article may be off, but always check and update your stuff.

    I always check http://www.cert.org/nav/index.html from time to time...
    body { background:#000000; color:#000000 }
    HEY, WHO TURNED OUT THE LIGHTS?!?
    Easy come easy go!!!
    CryingWolf


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •