Subject | Re: [firebird-support] Re: Hack attempts ... |
---|---|
Author | Lester Caine |
Post date | 2014-09-20T10:16:13Z |
On 20/09/14 10:51, mapopa@... [firebird-support] wrote:
Of cause it fails miserably when it's injecting into parameters anyway :)
Since it claims to be able to identify Firebird has anybody actually
seen it do anything but cause error messages? It obviously has no idea
what underlies the sites it's trying to hack?
--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk
>Interesting ...
> Seems to be an automated bot that tries to takeover the server something
> inspired by sqlmap
>
> https://github.com/sqlmapproject/sqlmap
>
> or phpmvs
> http://sourceforge.net/projects/phpmvs/
>
> some of the takeover attempts are useless on a firebird system
>
> sqlmapproject/sqlmap
> <https://github.com/sqlmapproject/sqlmap/blob/master/plugins/dbms/firebird/takeover.py>
Of cause it fails miserably when it's injecting into parameters anyway :)
Since it claims to be able to identify Firebird has anybody actually
seen it do anything but cause error messages? It obviously has no idea
what underlies the sites it's trying to hack?
--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk