You are here: hacking technology > network management > Content
Hot Articles
Recommend Articles
New Articles
Banned WVS scanner scanning website directory ideas
  Add date: 03/11/2011   Publishing date: 03/11/2011   Hits: 84

Acunetix Web Vulnerability could is in a foreign production and its excellent scanning tools that can help mining site many loopholes, including the familiar, SQLinjection XSS (many from think to cattle man like with WVS Saul stood found XSS published said he found...). . Since WVS so cool, then we don't give him the opportunity to visit the website, like plugging SQL injection as to stop it.

Analyses the WVS scanning time of header files, basic it includes its website English name: acunetix, hence we sought from the name. Here are three versions of code:

1. The ASP (JScript) edition, for the user, can use LBS (added or to include in the ASP file _common. :

The HTML code is as follows:

< %

Var StopScan = "= = WVS PLS Get Out! BY Honker Security Team! = =",

Var requestServer = String (that ServerVariables (" j All_Raw "). ToLowerCase ();

If (stopscan Session (" ") = = 1) {

5 Write (StopScan);.

5; End.

}

If (requestServer. IndexOf (" ") acunetix > 0) {

5 Write (StopScan);.

Stopscan Session (" ") = 1;

5; End.

}

% >

2. ASP (VBscript) edition, general ASP user can use this, including to conn. ASP can:

The HTML code is as follows:

< %

StopScan, RequestServer Dim

StopScan = "= = WVS PLS Get Out! BY Honker Security Team! = ="

RequestServer = Lcase (that ServerVariables (j) All_Raw ""

If stopscan Session (" ") = 1 Then

5 Write (StopScan).

5. The End

End If

If instr (RequestServer, "acunetix") Then

5 Write (StopScan).

Stopscan Session (" ") = 1

5. The End

End If

% >

3. PHP version:

The HTML code is as follows:

<? PHP

$HTTP = $_SERVER [" ALL_HTTP "],

If (isset ($_COOKIE [" StopScan "]) & & $_COOKIE [" StopScan "] {

Die (" = = WVS PLS Get Out! BY Honker Security Team! = = ");

}

If (strpos (strtolower ($HTTP), "acunetix") {

Setcookie (", 1); StopScan"

Die (" = = WVS PLS Get Out! BY Honker Security Team! = = ");

}

? >

The code is very simple, the paper provide just a thought, for the average WVS scanning all can intercept, if the header information can define your own or meet the zwell JSKY, everyone can find the matching.


Prev:By 2010, the introduction and preventive measures new attacks Next:Ensure the Web application security of effective measures

Comment:

Category: Home > network management