/**

popular collection of scripts for all

*/
/** Search */

Security Systems

 }

Port checker cgi script

Hits: 31
*****
0.0

PassGen

Hits: 17
*****
0.0

IPLog

Hits: 19
*****
0.0
The port checker 1 cgi script
Displays an ascii art image
PassGen, an easy way to make
You place an SSI tag on your
will check ports on your
of a random sequence of
sure your users choose
webpage and then whenever
computer to see if they are
letters/digits and asks the
secure passwords to cut down
the page is loaded a
open, closed, or do they
visitor to type the sequence
on password hackers breaking
database is updated with
responding. This will give
in a field provided. If the
their accounts open! Set
that persons IP in it. This
you a good indicator as to
typed sequence is the same
comes with 2 scripts, one
is useful for security
the status of your computers
as in the image, the
that allows them to enter
purposes especially on
security status. The
original form script
data and generates a
credit card orders! The
port checker cgi script can
(action) is invoked.
password based on that data,
database will log the
check unlimited number of
Otherwise, the visitor is
and one that randomly
hostname on the page, the IP
ports. Ports can be easily
asked to go back and correct
chooses a secure password
on the page and time it was
added or removed in script
what he/she typed before.
and displays it for them.
requested - obviosuly the
just by opening it with
VVS requires Perl with the
Both scripts use 2 arrays,
page name and path is logged
notepad. Script checks ANY
CGI class. It works for any
1 for letters(of both
too. There are two modes of
IP address you want, except
form script written in Perl,
capital and lower-case
operation, administrators
reseved ones.
independently of whether the
letters) and the other for
can either choose text based
 
script uses CGI or
numbers 0 - 9. It iterates
databases or MySQL based
 
cgi-lib.pl or etc.
through a loop and picks out
databases. This allows for
 
 
random numbers and letters
the administrator to have a
 
 
and put them together. Given
site ideally suited to him
 
 
that they are random, it
which grows with his/her
 
 
makes it very difficult to
requirements. The
 
 
be "cracked" by
"administration"
 
 
malicious
section of the website
 
 
"hackers". It then
contains two pages. The
 
 
returns the password and
first lists all the IPs and
 
 
displays the page,
the pages (everything stored
 
 
generated_password.html in
in the database in other
 
 
your templates/ subdirectory.
words), and the second is a
 
 
 
page which allows deletion
 
 
 
of individual records of IPs
 
 
 
or all at once. The
 
 
 
"listing" page has
 
 
 
links to the deletion page.


Date: Sep, 12 2006


Date: Jul, 10 2006


Date: Jun, 08 2006


Date: Jun, 08 2006
Prevents visitors using
This script, when properly
This script was written to
Find the most common way of
download managers from
installed, will log and
help stop automated brute
hacking and be notified by
leeching images and programs
track any failed
force attacks against your
email/pager around the
from your website. Many
authentication attempts for
website. Are you tired of
clock. Most hackers use
visitors may be getting all
your members area(s). When
seeing www.yourdomain.com...
/tmp to hack linux servers
they want from your website
the failed number of
...cmd.exe in your log
by writing some file in /tmp
without actually viewing it
attempts coming from one
files? This script uses a
directory and call it
and your sponsors. This is a
certain IP exceeds a limit
custom 404 page that logs
remotely to play around in
powerful script for sites
you set, the script will
the IP address of the person
your server. If you are
with free content who make
automatically block that IP
making the 404 requests and
offering shared-hosting or
the majority of their money
from accessing your entire
after so many requests it
web hosting services on your
with sponsors. Can save you
site. This will also
adds that IP to the IIS
server, then you are making
a bundle in bandwidth costs
effectively block any person
servers deny list. There is
this much easier for hackers
as well.
trying to brute-force their
some HOWTO information with
to find access to your /tmp
 
way into your members
the download...Be sure to
directory. There are many
 
area(s). Whenever a block
read the README.html file!
ways of closing or limiting
 
is placed, you will be
This script works against
their access to this
 
notified by e-mail so you
requests made via browser,
directory such as running
 
can take the appropriate
wget, raw HTTP...maybe more.
PHP with suEXEC Support. I
 
action, e.g. contact the
I updated this script to use
assume you already know all
 
offenders ISP. The blocking
a safe.log. You can add Ip's
of those and you have a very
 
system is totally automated,
you dont want to ban in the
secure /tmp directory.
 
provided you have set up the
safe log. IP's you might not
However, often hackers find
 
correct .htaccess entries.
want to ban are those used
newer ways of accessing this
 
 
by Googlebot or Slurp (yahoo
directory. Therefore, it is
 
 
bot).
necessary to check this
 
 
 
directory often to make sure
 
 
 
nothing is going on without
 
 
 
you knowing it. Following
 
 
 
script was written to check
 
 
 
/tmp directory or any other
 
 
 
directory and notify the
 
 
 
admin if any un-authorized
 
 
 
file exists. To keep this
 
 
 
example simple, we are
 
 
 
looking into each file and
 
 
 
look for different keywords
 
 
 
such as "perl".
 
 
 
Keep in mind that this
 
 
 
script can only detect files
 
 
 
with source, not
 
 
 
executables. This is still
 
 
 
very useful as most hackers
 
 
 
use wget method to write
 
 
 
something into this
 
 
 
directory. You could
 
 
 
setup a cron-job to run this
 
 
 
every few minutes and have
 
 
 
it email you as soon as it
 
 
 
finds something. Script will
 
 
 
also create a log file of
 
 
 
what it finds.


Date: May, 22 2006


Date: Feb, 24 2006


Date: Oct, 12 2005


Date: Jun, 09 2005
{ Copyright } ©2006 NuclearScripts.com