http/https服务器安全：嗅探漏洞url路径

最新推荐文章于 2023-01-29 16:20:30 发布
最新推荐文章于 2023-01-29 16:20:30 发布
阅读量6.2k 收藏 1
点赞数 2
分类专栏： 安全与规范
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/zzhongcy/article/details/108101216
版权

简介

这里记录一下我知道的一些经常被黑客嗅探的路径。

1、有些可能是正常路径，比如：GET /robots.txt

2、有些是需要加入安全策略的路径，比如：GET /phpMyAdmin/index.php

 

防御方式

这里有个英文说明，我们做IT的，英文是必备技能哦，哈哈~~~

They are trying every likely location of potentially vulnerable scripts and website admin interface.

If you don't want people to compromise your web server then you have several options.

  1. Don't run a publicly facing website. If you are not up to the task of administrating a website full-time and applying patches and updates and fixing breaches then you shouldn't be doing it.
    Setting up a website is easy, keeping it up and secure is hard.
  2. Always keep your software up to date. Use the latest versions of software and related website tools.
  3. Use blacklisting tools for your website software to block most common sources of intrusion. Search for blacklist <your web stack> in Google or your favourite search engine.
  4. Your web logs should include the IP address of any requests. Look through your server documentation to find out how to block IP addresses.
  5. Set up your firewall to blacklist or block IP addresses.

Numbers 3 & 4 are, at best, temporary and transient fixes. "Hackers" can easily change IP address by using proxies, VPNs and other methods. They can reduce the effect (I.e. your not waste server resources) of attacks by simply ignoring them. It does not mean that you won't get traffic still, just that your server won't handle it.

Number 5 is just a variant on 3 & 4 that will prevent the website software from seeing the request at all. You will still get traffic and could be DOS'ed off the internet by it.

Number 2 is one of the most important and under-appreciated ideas. Bugs are found in software all the time and get fixed most of the time, but people often refuse to update the software because it might break something or need them to do more work to repair some other dependencies.

If you are not going to update your software then you might as well just put out a welcome mat and post your bank details for everyone to use.

Take a backup. Perform the update. If something breaks then roll back the backup and try again.

Do not just leave insecure software running on a public machine because it's "easier".

You will always get these kinds of intrusion attempts and they are a fact of having public facing computers. The best you can do is defend against them.

If your computer doesn't need to be public, with servers that are accessible to other users, then don't make it public. Use intermediate services that connect you to your computer. Granted you just move the compromise point to that service, but it is another point that has to fail before yours does.

 

漏洞url路径

这里只是提供参考，大家平时多多注意点吧。

request: "GET / HTTP/1.1", 
request: "GET /robots.txt HTTP/1.1", 
request: "POST /Admin16c882df/Login.php HTTP/1.1", 
request: "GET / HTTP/1.1", 
request: "GET /l.php HTTP/1.1", 
request: "GET /phpinfo.php HTTP/1.1", 
request: "GET /test.php HTTP/1.1", 
request: "POST /index.php HTTP/1.1", 
request: "POST /bbs.php HTTP/1.1", 
request: "POST /forum.php HTTP/1.1", 
request: "POST /forums.php HTTP/1.1", 
request: "POST /bbs/index.php HTTP/1.1", 
request: "POST /forum/index.php HTTP/1.1", 
request: "POST /forums/index.php HTTP/1.1", 
request: "GET /xiaoxia.php HTTP/1.1", 
request: "GET /yuyang.php HTTP/1.1", 
request: "GET /zz.php HTTP/1.1", 
request: "GET /coonig.php HTTP/1.1", 
request: "GET /ak.php HTTP/1.1", 
request: "GET /baidoubi.php HTTP/1.1", 
request: "GET /hhhhhh.php HTTP/1.1", 
request: "GET /meijianxue.php HTTP/1.1", 
request: "GET /no1.php HTTP/1.1", 
request: "GET /python.php HTTP/1.1", 
request: "GET /woshimengmei.php HTTP/1.1", 
request: "GET /indea.php HTTP/1.1", 
request: "GET /taisui.php HTTP/1.1", 
request: "GET /xiaxia.php HTTP/1.1", 
request: "GET /kk.php HTTP/1.1", 
request: "GET /xsser.php HTTP/1.1", 
request: "GET /zzz.php HTTP/1.1", 
request: "GET /99.php HTTP/1.1", 
request: "GET /dp.php HTTP/1.1", 
request: "GET /hs.php HTTP/1.1", 
request: "GET /1ts.php HTTP/1.1", 
request: "GET /haiyan.php HTTP/1.1", 
request: "GET /phpdm.php HTTP/1.1", 
request: "GET /root.php HTTP/1.1", 
request: "GET /5678.php HTTP/1.1", 
request: "GET /root11.php HTTP/1.1", 
request: "GET /xiu.php HTTP/1.1", 
request: "POST /wuwu11.php HTTP/1.1", 
request: "POST /xw.php HTTP/1.1", 
request: "POST /xw1.php HTTP/1.1", 
request: "POST /9678.php HTTP/1.1", 
request: "POST /wc.php HTTP/1.1", 
request: "POST /xx.php HTTP/1.1", 
request: "POST /xx.php HTTP/1.1", 
request: "POST /s.php HTTP/1.1", 
request: "POST /w.php HTTP/1.1", 
request: "POST /sheep.php HTTP/1.1", 
request: "POST /qaq.php HTTP/1.1", 
request: "POST /my.php HTTP/1.1", 
request: "POST /qq.php HTTP/1.1", 
request: "POST /aaa.php HTTP/1.1", 
request: "POST /hhh.php HTTP/1.1", 
request: "POST /jjj.php HTTP/1.1", 
request: "POST /vvv.php HTTP/1.1", 
request: "POST /www.php HTTP/1.1", 
request: "POST /ffr.php HTTP/1.1", 
request: "POST /411.php HTTP/1.1", 
request: "POST /415.php HTTP/1.1", 
request: "POST /421.php HTTP/1.1", 
request: "POST /444.php HTTP/1.1", 
request: "POST /a411.php HTTP/1.1", 
request: "POST /whoami.php HTTP/1.1", 
request: "POST /whoami.php.php HTTP/1.1", 
request: "POST /9.php HTTP/1.1", 
request: "POST /98k.php HTTP/1.1", 
request: "POST /981.php HTTP/1.1", 
request: "POST /887.php HTTP/1.1", 
request: "POST /888.php HTTP/1.1", 
request: "POST /aa.php HTTP/1.1", 
request: "POST /bb.php HTTP/1.1", 
request: "POST /pp.php HTTP/1.1", 
request: "POST /tt.php HTTP/1.1", 
request: "POST /bbq.php HTTP/1.1", 
request: "POST /jj1.php HTTP/1.1", 
request: "POST /jbb.php HTTP/1.1", 
request: "POST /7o.php HTTP/1.1", 
request: "POST /qwq.php HTTP/1.1", 
request: "POST /nb.php HTTP/1.1", 
request: "POST /kpl.php HTTP/1.1", 
request: "POST /hgx.php HTTP/1.1", 
request: "POST /ppl.php HTTP/1.1", 
request: "POST /tty.php HTTP/1.1", 
request: "POST /ooi.php HTTP/1.1", 
request: "POST /aap.php HTTP/1.1", 
request: "POST /app.php HTTP/1.1", 
request: "POST /bbr.php HTTP/1.1", 
request: "POST /ioi.php HTTP/1.1", 
request: "POST /uuu.php HTTP/1.1", 
request: "POST /yyy.php HTTP/1.1", 
request: "POST /ack.php HTTP/1.1", 
request: "POST /shh.php HTTP/1.1", 
request: "POST /ddd.php HTTP/1.1", 
request: "POST /nnn.php HTTP/1.1", 
request: "POST /rrr.php HTTP/1.1", 
request: "POST /ttt.php HTTP/1.1", 
request: "POST /bbqq.php HTTP/1.1", 
request: "POST /tyrant.php HTTP/1.1", 
request: "POST /qiqi.php HTTP/1.1", 
request: "POST /qiqi1.php HTTP/1.1", 
request: "POST /zhk.php HTTP/1.1", 
request: "POST /bbv.php HTTP/1.1", 
request: "POST /605.php HTTP/1.1", 
request: "POST /admin1.php HTTP/1.1", 
request: "POST /xi.php HTTP/1.1", 
request: "POST /999.php HTTP/1.1", 
request: "POST /jsc.php HTTP/1.1", 
request: "POST /jsc.php.php HTTP/1.1", 
request: "POST /jsc.php HTTP/1.1", 
request: "POST /11a.php HTTP/1.1", 
request: "POST /kkl.php HTTP/1.1", 
request: "POST /jkl.php HTTP/1.1", 
request: "POST /lmn.php HTTP/1.1", 
request: "POST /bx.php HTTP/1.1", 
request: "POST /Moxin.PHP HTTP/1.1", 
request: "POST /g.php HTTP/1.1", 
request: "POST /CCC.PHP HTTP/1.1", 
request: "POST /CCCC.PHP HTTP/1.1", 
request: "POST /mobai.PHP HTTP/1.1", 
request: "POST /avast.php HTTP/1.1", 
request: "POST /abc.php HTTP/1.1", 
request: "POST /Pings.php HTTP/1.1", 
request: "POST /123.php HTTP/1.1", 
request: "POST /log.php HTTP/1.1", 
request: "POST /log.php HTTP/1.1", 
request: "POST /log1.php HTTP/1.1", 
request: "POST /alipay.php HTTP/1.1", 
request: "POST /vf.php HTTP/1.1", 
request: "POST /tianqi.php HTTP/1.1", 
request: "POST /can.php HTTP/1.1", 
request: "POST /can.php HTTP/1.1", 
request: "POST /dns.php HTTP/1.1", 
request: "POST /dns.php HTTP/1.1", 
request: "POST /cmd.php HTTP/1.1", 
request: "POST /juji.php HTTP/1.1", 
request: "POST /n24.php HTTP/1.1", 
request: "POST /temp.php HTTP/1.1", 
request: "POST /jiaochi.php HTTP/1.1", 
request: "POST /ganzhuolang.php HTTP/1.1", 
request: "POST /987.php HTTP/1.1", 
request: "POST /h156.php HTTP/1.1", 
request: "POST /666666.php HTTP/1.1", 
request: "POST /xh.php HTTP/1.1", 
request: "POST /key.php HTTP/1.1", 
request: "POST /jb.php HTTP/1.1", 
request: "POST /duke.php HTTP/1.1", 
request: "POST /llld.php HTTP/1.1", 
request: "POST /404.php HTTP/1.1", 
request: "POST /jy.php HTTP/1.1", 
request: "POST /123.php HTTP/1.1", 
request: "POST /v.php HTTP/1.1", 
request: "POST /luoke.php HTTP/1.1", 
request: "POST /nidage.php HTTP/1.1", 
request: "POST /sanan.php HTTP/1.1", 
request: "POST /02.php HTTP/1.1", 
request: "POST /ddd.php HTTP/1.1", 
request: "POST /mo.php HTTP/1.1", 
request: "POST /sbkc.php HTTP/1.1", 
request: "POST /sbkcb.php HTTP/1.1", 
request: "POST /cnm.php HTTP/1.1", 
request: "POST /tests.php HTTP/1.1", 
request: "POST /luoran.php HTTP/1.1", 
request: "POST /luoran6.php HTTP/1.1", 
request: "POST /asen.php HTTP/1.1", 
request: "POST /fx.php HTTP/1.1", 
request: "POST /hl.php HTTP/1.1", 
request: "POST /1556189185.php HTTP/1.1", 
request: "POST /que.php HTTP/1.1", 
request: "POST /shanzhi.php HTTP/1.1", 
request: "POST /yc.php HTTP/1.1", 
request: "POST /ycc.php HTTP/1.1", 
request: "POST /yccc.php HTTP/1.1", 
request: "POST /lr.php HTTP/1.1", 
request: "POST /lr.php HTTP/1.1", 
request: "POST /2.php HTTP/1.1", 
request: "POST /xixi.php HTTP/1.1", 
request: "POST /qiqi.php HTTP/1.1", 
request: "POST /qiqi11.php HTTP/1.1", 
request: "POST /ruii.php HTTP/1.1", 
request: "POST /ci.php HTTP/1.1", 
request: "POST /mutuba.php HTTP/1.1", 
request: "POST /taocishun.php HTTP/1.1", 
request: "POST /gg.php HTTP/1.1", 
request: "POST /xiong.php HTTP/1.1", 
request: "POST /jing.php HTTP/1.1", 
request: "POST /ganshiqiang.php HTTP/1.1", 
request: "POST /n23.php HTTP/1.1", 
request: "POST /infos.php HTTP/1.1", 
request: "POST /api.php HTTP/1.1", 
request: "POST /zxc.php HTTP/1.1", 
request: "POST /sqlk.php HTTP/1.1", 
request: "POST /xx33.php HTTP/1.1", 
request: "POST /aotian.php HTTP/1.1", 
request: "POST /buluya.php HTTP/1.1", 
request: "POST /oumi.php HTTP/1.1", 
request: "POST /qiangkezhi.php HTTP/1.1", 
request: "POST /ce.PHP HTTP/1.1", 
request: "POST /cs.php HTTP/1.1", 
request: "POST /ww.php HTTP/1.1", 
request: "POST /zyc.php HTTP/1.1", 
request: "POST /inde.php HTTP/1.1", 
request: "POST /1.php HTTP/1.1", 
request: "POST /info8.php HTTP/1.1", 
request: "POST /qqq.php HTTP/1.1", 
request: "POST /lequ.php HTTP/1.1", 
request: "POST /anyi.php HTTP/1.1", 
request: "POST /user.php HTTP/1.1", 
request: "POST /xiao.php HTTP/1.1", 
request: "POST /wanmei.php HTTP/1.1", 
request: "POST /wuwu.php HTTP/1.1", 
request: "POST /bf.php HTTP/1.1", 
request: "POST /mybestloves.php HTTP/1.1", 
request: "POST /xiaoxi.php HTTP/1.1", 
request: "POST /xiaoxi.php HTTP/1.1", 
request: "POST /ww.php HTTP/1.1", 
request: "POST /pop.php HTTP/1.1", 
request: "POST /ok.php HTTP/1.1", 
request: "POST /test.php HTTP/1.1", 
request: "POST /conf.php HTTP/1.1", 
request: "POST /dashu.php HTTP/1.1", 
request: "POST /shell.php HTTP/1.1", 
request: "POST /queqiao.php HTTP/1.1", 
request: "POST /12345.php HTTP/1.1", 
request: "POST /qqq.php HTTP/1.1", 
request: "POST /15.php HTTP/1.1", 
request: "POST /slider.php HTTP/1.1", 
request: "POST /qunhuang.php HTTP/1.1", 
request: "POST /hannan.php HTTP/1.1", 
request: "POST /confie.php HTTP/1.1", 
request: "POST /igo.php HTTP/1.1", 
request: "POST /code.php HTTP/1.1", 
request: "POST /ss.php HTTP/1.1", 
request: "POST /php.php HTTP/1.1", 
request: "POST /about.php HTTP/1.1", 
request: "POST /incs.php HTTP/1.1", 
request: "POST /159.php HTTP/1.1", 
request: "POST /test.php HTTP/1.1", 
request: "POST /test1.php HTTP/1.1", 
request: "POST /images/1.php HTTP/1.1", 
request: "POST /images/asp.php HTTP/1.1", 
request: "POST /images/entyy.php HTTP/1.1", 
request: "POST /images/1ndex.php HTTP/1.1", 
request: "POST /images/defau1t.php HTTP/1.1", 
request: "POST /webconfig.txt.php HTTP/1.1", 
request: "POST /administrator/webconfig.txt.php HTTP/1.1", 
request: "POST /api.php HTTP/1.1", 
request: "POST /luso.php HTTP/1.1", 
request: "POST /1ndex.php HTTP/1.1", 
request: "POST /indexbak.php HTTP/1.1", 
request: "POST /4o4.php HTTP/1.1", 
request: "POST /xmlrpc.php HTTP/1.1", 
request: "POST /blog/xmlrpc.php HTTP/1.1", 
request: "POST /errors/processor.php HTTP/1.1", 
request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", 
request: "POST /plus/90sec.php HTTP/1.1", 
request: "POST /plus/read.php HTTP/1.1", 
request: "POST /plus/moon.php HTTP/1.1", 
request: "POST /plus/laobiao.php HTTP/1.1", 
request: "POST /plus/laobiaoaien.php HTTP/1.1", 
request: "POST /plus/e7xue.php HTTP/1.1", 
request: "POST /plus/mybak.php HTTP/1.1", 
request: "POST /plus/service.php HTTP/1.1", 
request: "POST /plus/xsvip.php HTTP/1.1", 
request: "POST /plus/bakup.php HTTP/1.1", 
request: "POST /include/tags.php HTTP/1.1", 
request: "POST /include/data/tags.php HTTP/1.1", 
request: "POST /images/swfupload/tags.php HTTP/1.1", 
request: "POST /dong.php HTTP/1.1", 
request: "POST /xun.php HTTP/1.1", 
request: "POST /plus/gu.php HTTP/1.1", 
request: "POST /plus/tou.php HTTP/1.1", 
request: "POST /plus/ma.php HTTP/1.1", 
request: "POST /plus/mytag.php HTTP/1.1", 
request: "POST /plus/dajihi.php HTTP/1.1", 
request: "POST /plus/shaoyong.php HTTP/1.1", 
request: "POST /datas.php HTTP/1.1", 
request: "POST /aojiao.php HTTP/1.1", 
request: "POST /guipu.php HTTP/1.1", 
request: "POST /zhui.php HTTP/1.1", 
request: "POST /plus/lucas.php HTTP/1.1", 
request: "POST /plus/canshi.php HTTP/1.1", 
request: "POST /plus/yunjitan.php HTTP/1.1", 
request: "POST /ji.php HTTP/1.1", 
request: "POST /xing.php HTTP/1.1", 
request: "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1", 
request: "GET /index.php HTTP/1.1", 
request: "GET /phpmyadmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmin/index.php HTTP/1.1", 
request: "GET /pmd/index.php HTTP/1.1", 
request: "GET /pma/index.php HTTP/1.1", 
request: "GET /PMA/index.php HTTP/1.1", 
request: "GET /PMA2/index.php HTTP/1.1", 
request: "GET /pmamy/index.php HTTP/1.1", 
request: "GET /pmamy2/index.php HTTP/1.1", 
request: "GET /mysql/index.php HTTP/1.1", 
request: "GET /admin/index.php HTTP/1.1", 
request: "GET /db/index.php HTTP/1.1", 
request: "GET /dbadmin/index.php HTTP/1.1", 
request: "GET /web/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /admin/pma/index.php HTTP/1.1", 
request: "GET /admin/PMA/index.php HTTP/1.1", 
request: "GET /admin/mysql/index.php HTTP/1.1", 
request: "GET /admin/mysql2/index.php HTTP/1.1", 
request: "GET /admin/phpmyadmin/index.php HTTP/1.1", 
request: "GET /admin/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /admin/phpmyadmin2/index.php HTTP/1.1", 
request: "GET /mysqladmin/index.php HTTP/1.1", 
request: "GET /mysql-admin/index.php HTTP/1.1", 
request: "GET /mysql_admin/index.php HTTP/1.1", 
request: "GET /phpadmin/index.php HTTP/1.1", 
request: "GET /phpAdmin/index.php HTTP/1.1", 
request: "GET /phpmyadmin0/index.php HTTP/1.1", 
request: "GET /phpmyadmin1/index.php HTTP/1.1", 
request: "GET /phpmyadmin2/index.php HTTP/1.1", 
request: "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.0/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.1/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.2/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.3/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.4/index.php HTTP/1.1", 
request: "GET /phpMyAdmin4.8.5/index.php HTTP/1.1", 
request: "GET /myadmin/index.php HTTP/1.1", 
request: "GET /myadmin2/index.php HTTP/1.1", 
request: "GET /xampp/phpmyadmin/index.php HTTP/1.1", 
request: "GET /phpMyadmin_bak/index.php HTTP/1.1", 
request: "GET /www/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /tools/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /phpmyadmin-old/index.php HTTP/1.1", 
request: "GET /phpMyAdminold/index.php HTTP/1.1", 
request: "GET /phpMyAdmin.old/index.php HTTP/1.1", 
request: "GET /pma-old/index.php HTTP/1.1", 
request: "GET /claroline/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /typo3/phpmyadmin/index.php HTTP/1.1", 
request: "GET /phpma/index.php HTTP/1.1", 
request: "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /phpMyAbmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmin__/index.php HTTP/1.1", 
request: "GET /phpMyAdmin+++---/index.php HTTP/1.1", 
request: "GET /v/index.php HTTP/1.1", 
request: "GET /phpmyadm1n/index.php HTTP/1.1", 
request: "GET /phpMyAdm1n/index.php HTTP/1.1", 
request: "GET /shaAdmin/index.php HTTP/1.1", 
request: "GET /phpMyadmi/index.php HTTP/1.1", 
request: "GET /phpMyAdmion/index.php HTTP/1.1", 
request: "GET /s/index.php HTTP/1.1", 
request: "GET /MyAdmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmin1/index.php HTTP/1.1", 
request: "GET /phpMyAdmin123/index.php HTTP/1.1", 
request: "GET /pwd/index.php HTTP/1.1", 
request: "GET /phpMyAdmina/index.php HTTP/1.1", 
request: "GET /phpMydmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmins/index.php HTTP/1.1", 
request: "GET /phpMyAdmin._/index.php HTTP/1.1", 
request: "GET /phpMyAdmin._2/index.php HTTP/1.1", 
request: "GET /phpmyadmin2222/index.php HTTP/1.1", 
request: "GET /phpMyAdmin333/index.php HTTP/1.1", 
request: "GET /phpmyadmin3333/index.php HTTP/1.1", 
request: "GET /php2MyAdmin/index.php HTTP/1.1", 
request: "GET /phpiMyAdmin/index.php HTTP/1.1", 
request: "GET /phpNyAdmin/index.php HTTP/1.1", 
request: "GET /1/index.php HTTP/1.1", 
request: "GET /download/index.php HTTP/1.1", 
request: "GET /phpMyAdmin_111/index.php HTTP/1.1", 
request: "GET /phpmadmin/index.php HTTP/1.1", 
request: "GET /321/index.php HTTP/1.1", 
request: "GET /123131/index.php HTTP/1.1", 
request: "GET /phpMyAdminn/index.php HTTP/1.1", 
request: "GET /phpMyAdminhf/index.php HTTP/1.1", 
request: "GET /sbb/index.php HTTP/1.1", 
request: "GET /WWW/phpMyAdmin/index.php HTTP/1.1", 
request: "GET /phpMyAdmln/index.php HTTP/1.1", 
request: "GET /phpMyAdmin_ai/index.php HTTP/1.1", 
request: "GET /__phpMyAdmin/index.php HTTP/1.1", 
request: "GET /program/index.php HTTP/1.1", 
request: "GET /shopdb/index.php HTTP/1.1", 
request: "GET /phppma/index.php HTTP/1.1", 
request: "GET /phpmy/index.php HTTP/1.1", 
request: "GET /mysql/admin/index.php HTTP/1.1", 
request: "GET /mysql/dbadmin/index.php HTTP/1.1", 
request: "GET /mysql/sqlmanager/index.php HTTP/1.1", 
request: "GET /mysql/mysqlmanager/index.php HTTP/1.1", 
request: "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1", 
request: "GET /sqladmin/index.php HTTP/1.1", 
request: "GET /sql/index.php HTTP/1.1", 
request: "GET /SQL/index.php HTTP/1.1", 
request: "GET /websql/index.php HTTP/1.1", 
request: "GET /MySQLAdmin/index.php HTTP/1.1", 
request: "GET /manager/html HTTP/1.1", 
request: "POST /axis2/axis2-admin/login HTTP/1.1", 

 

参考：

https://superuser.com/questions/1504636/am-i-being-hacked

http://www.networksystemssolutions.eu/webattackers.php?drilldown=132.232.86.91

https://jamesbrine.com.au/bruteforce-files-list-2020-07-20/

zzhongcy
关注
  • 2
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
sogou spider 抓取网站robots.txt 400问题？
weixin_44252244的博客
03-02 1434
首先，我要说，网站正常访问是没问题的。而且，百度，360 spider都访问ok。 但sogou站长工具测试没问题，后台日志显示，抓取的时候，就是400. 不过，确实看不出来400的与其他有什么差别。由于采用了https访问，所以，做了301转向调整。另外 panjishengwu.com 转向了www.panjisheng.com的转向跳转。都是301. 浏览器测试都是正常。 对于400错误，我...
91sp.vido.ws index.php_index
weixin_42514750的博客
12-30 8万+
Departamentde Filologia Anglesa i Alemanya=o:p>Universitatde =València___________________________________________=__José Santaemilia RuizAssociate Professor of English Language and Linguistics.<...
什么是路径探索_探索什么为您最喜欢的网站提供动力
cumai3211的博客
10-08 867
什么是路径探索Have you ever wondered if the site you’re visiting is powered by WordPress or if the webapp you’re using is powered by Ruby on Rails? With these extensions for Google Chrome, you’ll never have...
嗅探原理与反嗅探技术详解
anonfan的专栏
11-30 1114
一．嗅探器的基础知识 1．1 什么是嗅探器？ 嗅探器的英文写法是Sniff，可以理解为一个安装在计算机上的窃听设备它可以用来窃听计算机在网络上所产生的众多的信息。简单一点解释：一部电话的窃听装置, 可以用来窃听双方通话的内容，而计算机网络嗅探器则可以窃听计算机程序在网络上发送和接收到的数据。 可是，计算机直接所传送的数据，事实上是大量的二进制数据。因此, 一个网络窃听程序必须也使用特定的网络协议来
【威胁分析】phpunit远程代码执行漏洞
sinat_35058227的博客
08-29 2905
phpunit是php中的单元测试工具 其4.8.19 ~ 4.8.27和5.0.10 ~ 5.6.2版本的： /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 有一个eval eval('?>'.file_get_contents('php://input')); 直接将PHP代码作为POST Body发送 即可执行php代码 威胁分析： 1、分析是否利用该漏洞 uri为：/vendor/phpunit/phpunit/src/Util/PHP
WordPress网站大量xmlrpc.php请求，解决办法
ts小陈的博客
01-29 499
昨天发现大量404请求，于是发现全部为cron，可看这篇文章《昨晚解决后，今天再次查看日志发现正常了，但是出现了大量POST请求xmlrpc.php，这些人都没事干没事扫我这小破站干啥。直接访问提示如下。
badge:嗅探视频URLJavaScript库
05-13
徽章一个JavaScript库，用于在加载的页面上嗅探视频URL 将其添加到您的页面： <head> [removed] [removed]</head> 您可以传递视频URL数组以进行手动测试，首先包括上面的徽标，然后可以按以下方式设置...
网络安全网络嗅探工具.zip
最新发布
12-29
网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探工具.zip网络嗅探...
优质插件 / 猫抓 / 网页媒体嗅探工具
03-28
猫抓插件能帮助他们轻松捕获HTTP/HTTPS请求，查看请求头、响应头、数据包内容等关键信息，极大地提升了开发效率。 此外，猫抓插件不仅限于基础的媒体嗅探，还可能提供其他高级特性，如数据过滤、数据保存、请求拦截...
osniffer:嗅探器在 openwrt 上运行
07-06
7. **网络安全**: osniffer 可以作为网络安全检查的工具，帮助发现未经授权的访问尝试、网络漏洞或其他潜在的安全威胁。 8. **性能优化**: 通过分析网络流量，osniffer 也能帮助识别可能影响网络性能的问题，如高...
oledor:嗅探器
03-20
在IT行业中，嗅探器是一种重要的网络诊断和安全审计软件，它们能够帮助网络管理员和安全专家监控网络流量，查找潜在的安全漏洞或者性能问题。 嗅探器的工作原理通常是通过将网络接口设置为混杂模式，这样它就可以...
阻止网络机器人爬取网站内容
承接app开发，旅游电商网站设计
03-25 7681
周末大清早收到封警报邮件，估计网站被攻击了，要么就是缓存日志memory的问题。打开access.log 看了一眼，原来该时间段内大波的bot（bot： 网上机器人；自动程序 a computer programthat performs a particular task again and again many times）访问了我的网站。 http://ltx71.com  http:/
WordPress xmlrpc.php 漏洞利用
xj28555的博客
05-15 3855
WordPress采用了XML-RPC接口.并且通过内置函数WordPress API实现了该接口内容。 所以，你可要通过客户端来管理Wordpress。 通过使用WordPress XML-RPC, 你可以使用业界流行博客客户端Weblog Clients来发布你的WordPress日志和页面。同时，XML-RPC 也可使用extended by WordPress Plugins插件来自定义你的规则。 0X01 激活XML-RPC 从3.5版本开始，XML-RPC功能默认开启。 早些版本，可通过.
phpunit 远程代码执行 (CVE-2017-9841)
YouthBelief的博客
11-04 2485
@[TOC](phpunit 远程代码执行 (CVE-2017-9841)) phpunit 远程代码执行 (CVE-2017-9841) PHPUnit 是 PHP 程式语言中最常见的单元测试 (unit testing) 框架。 0x01 漏洞描述 通常phpunit使用composer非常流行的PHP依赖管理器进行部署,将会在当前目录创建一个vendor文件夹.phpunit生产环境中仍然安装了它,如果该编写器模块存在于Web可访问目录，则存在远程代码执行漏洞。 80端口 漏洞位于 /vendor/p
使用telnet发送email(内嵌图片，附件)
热门推荐
hellopeng1的博客
11-09 87万+
使用telnet发送email(内嵌图片，附件)因为最近想复习一下smtp协议所以无聊的本人想使用telnet发送email，虽然比较简单但还是记录下来希望可以给一些需要的朋友帮助吧。准备： 首先本人实在windows系统上进行的test，目前大多数windows系统不会开启telnet功能， 如果还未开启telnet功能请先在”控制面板”-“程序和功能”-“打开或关闭windows功能”中将t
Nginx配置错误
N的博客
12-24 1443
Nginx配置错误
elasticsearch  logstash kibana v7.9.1 对接nginx日志
zhangwuji1900的博客
09-29 791
前言 本文章主要是实现elasticsearch logstash kibana v7.9.1 黄金组合采集nginx日志，并可视化展示。 此外，本文章是我一个开源项目的一部分，所以请阅读各位的开发者给我的开源点点 star，绝对值！ https://gitee.com/daitougege/GinSkeleton 本文在我的项目最早的发布日期是2020-09-21，距离官方的v7.9.1系列版本发布不到20天，很可能我们是对接这个版本的全网首篇文章。 正文部分： 原始地址：https:..
phpunit 远程代码执行漏洞
m0_46580995的博客
10-16 1521
phpunit是php中的单元测试工具，其4.8.19 ~ 4.8.27和5.0.10 ~ 5.6.2版本的vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 有一个eval eval('?>'.file_get_contents('php://input')); 直接将PHP代码作为POST Body发送 即可执行php代码 ...
8.5-练习
~airrudder~
08-06 523
目录SSRFSSRF扫描内网靶机SSRF攻击 Redis333333XXE漏洞XXE读取/flag和./flag.php无回显XXE读取/flagPHP代码执行Thinkphp5 代码执行phpunit代码执行1111 上一篇 | 目录 | 下一篇 SSRF http://10.20.25.44/: SSRF 扫描内网靶机 http://10.20.25.44:82/: SSRF攻击 Redis，redis 密码 root http://10.20.25.44:84/: SSRF攻击本地的 php.
使用ttercap对http网站进行嗅探
06-01
使用ttercap对HTTP网站进行嗅探可以帮助我们分析HTTP流量，了解HTTP通信中的数据包内容，识别敏感信息、漏洞等安全问题。下面是一个基于命令行的ttercap命令示例，用于对HTTP网站进行嗅探： ``` sudo ttercap -i eth0 -P remote_browser -M arp:remote /IP地址/ /要嗅探的端口/ ``` 其中，`-i`参数指定要嗅探的网络接口，这里是eth0；`-P`参数指定要使用的插件，这里使用remote_browser插件，用于拦截远程浏览器的HTTP请求；`-M`参数指定使用的嗅探器类型，这里使用ARP嗅探器remote，用于对特定的IP地址进行嗅探；`/IP地址/`和`/要嗅探的端口/`分别指定要嗅探的HTTP网站的IP地址和端口号。 执行这个命令后，ttercap会开始对指定的HTTP网站进行嗅探，并将捕获到的HTTP请求和响应数据包进行分析和展示。可以通过命令行的交互界面来查看和分析捕获到的数据包，也可以将数据包保存到文件中进行后续分析。 需要注意的是，使用ttercap进行网络嗅探涉及到一些法律和道德问题，应该仅用于合法的安全测试和研究目的，不得用于非法的攻击和窃取行为。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值