Security Basics mailing list archives

Re: Strange found in apache error.log


From: ascii <ascii () katamail com>
Date: Mon, 05 Dec 2005 19:03:19 +0100

kc () mikrobit pl wrote:
How could they get and run that scripts ??

via php exec/system/backtrick/etc.. for example

in error.log you will find any stderror generated
by php exec, thus these are script kiddies because
a simple 2>&1 appended to the string let your logs
clean

are you providing vhost hosting? read some docs
and harden your system

also moving wget and nc from the $PATH to /root
isn't a so bad idea

ascii - http://www.ush.it/


Current thread: