serval site monitoring presentation - Презентация serval
TRANSCRIPT
, , :
https://www.facebook.com/barychev.alexander
[email protected] #143876457 Skype: dimases77
-
,
,
-
SAPE, Linkfeed,
.js, .swf
.php, .pl, .cgi , ,
.htaccess ( ) , User Agent
.htm, .html , Webshell
IP
!
,
CMS
XSS, SQL-injection, LFI
Local File Inclusion
avatar.jpg WebShell:
image.php LFI-:
http://site.com/image.php?file=../../upload/avatar.jpg&e=phpinfo();
WebShell
:,
bash
PHP
eval() -
assert() -
exec(), shell_exec(), system() -
base64_decode() -
preg_replace() e
( 2012 )
?
CMS Wordpress, Joomla
CMS
FTP SCP ,
, Apache + PHP
, ,
?
CMS, ,
http .htaccess,
!
www.serval.site
SerVal?
http://www.serval.site
, , , , http://serval.moisite.ru, Cron.
PHP-
,
http://www.serval.site
http://www.serval.site
http://www.serval.site
altika.ru
05 2016 0 3 :/thumbs.php [25655B]
/webim/styles/original/images/buttons/mysql.php [28786B]
/webim/styles/original/images/mail.php [233B]
http://www.serval.site
altika.ru
:/xml.php [431B]
/images/data/inc.php [539B]
/images/hyundai/general.php [8361B]
/images/hyundai/test.php [442B]
/images/hyundai/themes.php [8361B]
/images/main/config.php [592B]
( 20)...
:/chapters/daewoo/config.php [2869B]
/stats/reports/filters.php [7175B]
/stats/reports/ip.php [1740B]
/stats/reports/searchpages.php [7193B]
/stats/reports/servers.php [2588B]
( 24)...
05 2016 5-6
http://www.serval.site
SerVal
http://www.serval.site
allrad.ru
http://www.serval.site
:
!
!
http://www.serval.site
!
,,!
http://www.serval.site
https://www.facebook.com/barychev.alexander
[email protected] #143876457 Skype: dimases77
!
http://www.serval.site