Web Wiz - Green Windows Web Hosting
Web Wiz Homepage Search Web Wiz

  New Posts New Posts RSS Feed - Web Hacking
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Web Hacking
 Post Reply Post Reply
Author
  Topic Search Topic Search  Topic Options Topic Options
VBHS1999 View Drop Down
Newbie
Newbie


Joined: 17 June 2003
Location: United States
Status: Offline
Points: 24 		Post Options Post Options   Thanks (0) Thanks(0)   Quote VBHS1999 Quote  Post ReplyReply Direct Link To This Post Topic: Web Hacking
    Posted: 11 August 2003 at 2:10pm

Has anyone noticed an increase in hacking activity?

I had a peson hack my site news, tried to hack guestbook, and tried to hack the forum. 

I am also noticing A LOT of directory traversals.

Anyone else noticing activities like this?

Kevin Carter



Edited by VBHS1999
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844 		Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 11 August 2003 at 2:42pm
You can never be to lax on security, make sure all applications you are running that have access databases have their database properly secured in a folder outside of your web sites root.
Web Wiz Forums Hosting
ASP.NET Web Hosting
Back to Top
philcom2000 View Drop Down
Groupie
Groupie
Avatar

Joined: 07 February 2002
Location: England
Status: Offline
Points: 193 		Post Options Post Options   Thanks (0) Thanks(0)   Quote philcom2000 Quote  Post ReplyReply Direct Link To This Post Posted: 11 August 2003 at 3:05pm

The last few months i have noticed a large increase in attempts to access my private servers. It seems that i am updating and patching weekly just to stay ahead of the hackers. My website has not been under as much pressure but its still a pain that we have too spend so many hours keeping personal & customer files safe with constant monitoring. 
Back to Top
zMaestro View Drop Down
Senior Member
Senior Member


Joined: 11 May 2003
Location: Egypt
Status: Offline
Points: 1183 		Post Options Post Options   Thanks (0) Thanks(0)   Quote zMaestro Quote  Post ReplyReply Direct Link To This Post Posted: 11 August 2003 at 8:22pm

when ever i look to the log file of my server, and see the invalid page request.. most of them i find like this.

http://www.falahonline.com/forum/wwforum.mdb

they are trying to download the database, but they are stubid.. they don't know I changed its name to wwgforum.mdb  so they always get a 404 error....

I got an advice just renaming it to wwforum.asp and not wwforum.mdb not and it will function normally and can never be downloaded.

 

[btw, no one comment on the user(s) I have on the forum.. i didn't advertise for the site yet]
Back to Top
faubo View Drop Down
Senior Member
Senior Member
Avatar

Joined: 30 May 2002
Location: Brazil
Status: Offline
Points: 560 		Post Options Post Options   Thanks (0) Thanks(0)   Quote faubo Quote  Post ReplyReply Direct Link To This Post Posted: 12 August 2003 at 12:30pm

Oh Thanks!!!

Now I know you renamed it!!!!

renaming to asp is very good, but you should also encript the databse and use a more strange name than wwgforum.mdb

I have one database of news that I oce called "logout.asp"... who would want to try to download a logout page?
I don't know how to make you click here
Back to Top
zMaestro View Drop Down
Senior Member
Senior Member


Joined: 11 May 2003
Location: Egypt
Status: Offline
Points: 1183 		Post Options Post Options   Thanks (0) Thanks(0)   Quote zMaestro Quote  Post ReplyReply Direct Link To This Post Posted: 12 August 2003 at 3:18pm
Originally posted by faubo faubo wrote:

Oh Thanks!!!

Now I know you renamed it!!!!

OH NO, so you are the one who is hacking my server...



Edited by zMaestro
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.

Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.