|
The port checker 1 cgi script
Displays an ascii art image
PassGen, an easy way to make
You place an SSI tag on your
will check ports on your
of a random sequence of
sure your users choose
webpage and then whenever
computer to see if they are
letters/digits and asks the
secure passwords to cut down
the page is loaded a
open, closed, or do they
visitor to type the sequence
on password hackers breaking
database is updated with
responding. This will give
in a field provided. If the
their accounts open! Set
that persons IP in it. This
you a good indicator as to
typed sequence is the same
comes with 2 scripts, one
is useful for security
the status of your computers
as in the image, the
that allows them to enter
purposes especially on
security status.
The
original form script
data and generates a
credit card orders! The
port checker cgi script can
(action) is invoked.
password based on that data,
database will log the
check unlimited number of
Otherwise, the visitor is
and one that randomly
hostname on the page, the IP
ports. Ports can be easily
asked to go back and correct
chooses a secure password
on the page and time it was
added or removed in script
what he/she typed before.
and displays it for them.
requested - obviosuly the
just by opening it with
VVS requires Perl with the
Both scripts use 2 arrays,
page name and path is logged
notepad. Script checks ANY
CGI class. It works for any
1 for letters(of both
too. There are two modes of
IP address you want, except
form script written in Perl,
capital and lower-case
operation, administrators
reseved ones.
independently of whether the
letters) and the other for
can either choose text based
script uses CGI or
numbers 0 - 9. It iterates
databases or MySQL based
cgi-lib.pl or etc.
through a loop and picks out
databases. This allows for
random numbers and letters
the administrator to have a
and put them together. Given
site ideally suited to him
that they are random, it
which grows with his/her
makes it very difficult to
requirements. The
be "cracked" by
"administration"
malicious
section of the website
"hackers". It then
contains two pages. The
returns the password and
first lists all the IPs and
displays the page,
the pages (everything stored
generated_password.html in
in the database in other
your templates/ subdirectory.
words), and the second is a
page which allows deletion
of individual records of IPs
or all at once. The
"listing" page has
links to the deletion page.
Date: Sep, 12 2006 Date: Jul, 10 2006 Date: Jun, 08 2006 Date: Jun, 08 2006 |
|
Prevents visitors using
This script, when properly
This script was written to
Find the most common way of
download managers from
installed, will log and
help stop automated brute
hacking and be notified by
leeching images and programs
track any failed
force attacks against your
email/pager around the
from your website. Many
authentication attempts for
website. Are you tired of
clock.
Most hackers use
visitors may be getting all
your members area(s). When
seeing www.yourdomain.com...
/tmp to hack linux servers
they want from your website
the failed number of
...cmd.exe in your log
by writing some file in /tmp
without actually viewing it
attempts coming from one
files? This script uses a
directory and call it
and your sponsors. This is a
certain IP exceeds a limit
custom 404 page that logs
remotely to play around in
powerful script for sites
you set, the script will
the IP address of the person
your server.
If you are
with free content who make
automatically block that IP
making the 404 requests and
offering shared-hosting or
the majority of their money
from accessing your entire
after so many requests it
web hosting services on your
with sponsors. Can save you
site. This will also
adds that IP to the IIS
server, then you are making
a bundle in bandwidth costs
effectively block any person
servers deny list. There is
this much easier for hackers
as well.
trying to brute-force their
some HOWTO information with
to find access to your /tmp
way into your members
the download...Be sure to
directory. There are many
area(s). Whenever a block
read the README.html file!
ways of closing or limiting
is placed, you will be
This script works against
their access to this
notified by e-mail so you
requests made via browser,
directory such as running
can take the appropriate
wget, raw HTTP...maybe more.
PHP with suEXEC Support. I
action, e.g. contact the
I updated this script to use
assume you already know all
offenders ISP. The blocking
a safe.log. You can add Ip's
of those and you have a very
system is totally automated,
you dont want to ban in the
secure /tmp directory.
provided you have set up the
safe log. IP's you might not
However, often hackers find
correct .htaccess entries.
want to ban are those used
newer ways of accessing this
by Googlebot or Slurp (yahoo
directory. Therefore, it is
bot).
necessary to check this
directory often to make sure
nothing is going on without
you knowing it. Following
script was written to check
/tmp directory or any other
directory and notify the
admin if any un-authorized
file exists.
To keep this
example simple, we are
looking into each file and
look for different keywords
such as "perl".
Keep in mind that this
script can only detect files
with source, not
executables. This is still
very useful as most hackers
use wget method to write
something into this
directory.
You could
setup a cron-job to run this
every few minutes and have
it email you as soon as it
finds something. Script will
also create a log file of
what it finds.
Date: May, 22 2006 Date: Feb, 24 2006 Date: Oct, 12 2005 Date: Jun, 09 2005 |