The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
77 views

Understanding & Resolving Web Server Exploits

We recently had someone contact our company pointing out that we had numerous security threats that could be used to exploit our systems. They were nice enough to provide a list of these to which we ...
-2
votes
1answer
65 views

Multiple attacks - what can I do

I experience multiple attacks on my server recently (for past several days). Types of these attacks are e.g.: Several SQL Injection methods (select/union/where/null, etc.) Brute force attacks (e.g. ...
0
votes
0answers
63 views

Overactive SQL Injection Attack Firewall Rules

We have a web app that our client's employees use to submit signatures from customers using HTML5 canvas to create PNG images. The signature pad is converted to base64 encoded HTTP POST data. Our ...
0
votes
2answers
147 views

Using modsec to block a sql injection?

I'm seeing malicious traffic (SQL injections) directed towards some of my websites and I want to use modsec to block the requests. An attack will look something like the following: ...
2
votes
3answers
265 views

MySQL Injection Attacks? Random URL's Causing Errors

We just started running our own web server a few months ago on Rackspace (they are great). I use NewRelic (also pretty cool) to monitor server usage and I am getting error alerts that appear to me to ...
1
vote
1answer
940 views

Setting up mod_security for phpmyadmin on 12.04

Having issues with mod_security blocking functions of phpmyadmin such as server_databases.php, as sql injection attacks. Is there a way to correct this, or do I need to disable mod_security totally ...
0
votes
1answer
86 views

Multiple POST SQL injection from same IP [duplicate]

Recently I checked my Apache domlog and noticed the following attack: POST ...
0
votes
1answer
128 views

Are there simple command line tools to decode a SQL Injection request string? [closed]

My web server periodically comes under attack, and I get a bunch of requests that look like /my.page?union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- Are ...
1
vote
1answer
311 views

Dynamic column enumeration for preventing SQL injection

I have an application which is completely for internal use but I'm trying to make sure I have my bases covered on SQL injection. Unless someone else has some information to point me otherwise there ...
0
votes
1answer
941 views

How to check web server logs for SQL injection?

If I have a PHP site hosted on Apache and someone hacks it using SQL injection, is there a way I can find out exactly which script caused this by looking at my web server logs? Or using some other ...
4
votes
2answers
204 views

Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials? [closed]

A friend pointed out a sql injection vulnerability one an application I work with. This search parameter: '; exec xp_cmdshell 'dir'; -- Returned the message: The EXECUTE permission was denied ...
1
vote
1answer
700 views

SQL injection security vulnerability in Plesk control pannel

I have plesk 10.3.1 and I received following email from the Plesk admin Parallels, the manufacturer and distributor of the Plesk Control Panel, has identified a SQL injection security ...
3
votes
1answer
298 views

Getting false-positive SQL Injection reports

We have installed a new Juniper SRX firewall with IDP, so the firewall is inspecting the traffic for suspicious activity. I've encountered 3 "false-positive" reports for SQL injection attacks that ...
0
votes
1answer
80 views

How can I make UrlScan test extensionless urls?

If I use UrlScan to block common SQL Injection attempts on asp- and aspx-files, I would do something like this: [SQLInjection] AppliesTo=.asp,.aspx DenyDataSection=SQLInjectionStrings ScanURL=0 ...
1
vote
4answers
2k views

What happened to IIS lockdown?

A long time ago before I left the Windows environment, there was such a thing as "IIS lockdown tool" - something that Microsoft provided for free. It was meant to well lock down your IIS instance and ...
2
votes
2answers
116 views

Legalities of freelance security consultant (SQLi) [closed]

Over the years I've gained a large amount of experience in Programming (my main occupation) and server admin, and as a result have a fairly decent backing in security practices. I'm also pretty good ...
1
vote
1answer
163 views

Is there a program that automaticly finds .PHP files on a web server and tests them for SQL injections?

I learned about the recent Barracuda hack, which sources say used an automated tool to locate some PHP file and test it for SQL injections. At my current company, I feel that security is not the top ...
2
votes
4answers
149 views

What response should be made to a continued web-app crack attempt?

I've issues with a continuous, concerted cracking attempt on a website (coded in php). The main problem is sql-injection attempts, running on a Debian server. A secondary effect of the problem is ...
6
votes
6answers
927 views

How should I set up protection for the database against sql injection when all the php scripts are flawed?

I've inherited a php web app that is very insecure, with a history of sql injection. I can't fix the scripts immediately, I rather need them to be running to have the website running, and there are ...
1
vote
2answers
396 views

is there any way to find out how I was hacked? What was the weak point?

one of my site hacked few times :( first I lost all databases, some tables were cleared and some of table's data had changed! than at the second hack, all tables were cleared and some php files' codes ...
4
votes
4answers
6k views

How to trace possible SQL injection attack?

We just had one of our (fairly important) wordpress databases inexplicably dropped. Fortunately we keep nightly backups so it's not going to be the end of the world, but I want to avoid or at least be ...
3
votes
1answer
443 views

SQL Injection Filter IIS

Currently running an IIS server with some legacy asp & sql. I was wondering if there are any good isapi filters which would automate checking for SQL injection attacks ?
2
votes
6answers
952 views

How do I report SQL Injection attacks (e.g. to User's ISP)?

EDIT : Sorry, my question clearly wasn't clear. I don't want to report attempted server attacks internally; we already have systems that log. record and report that activity. What I was keen to do ...
21
votes
15answers
3k views

HELP! Production DB was SQL INJECTED! [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY Geeze, I'm desperate! A few hours ago our production DB was sql-injected. I know we have some big holes in the system... because ...