[Dshield] interesting little snippet

Klaus Lichtenwalder k.lichtenwalder at computer.org
Wed Jul 10 20:25:15 GMT 2002


Well, it *is* a slang word for vagina.
It looks like some script kiddie opening up a default IIS Server (which
you get to see if you use only the ip) and being pround of having
achieved that...

Klaus
[...]

> Anyone seen this before? apache 2.0.39 running on freebsd 4.6
> 
> 194.182.2.11 - - [30/Jun/2002:00:03:10 +0200] "GET 
> /<?$fp=fopen("http://141.18.247.23/muschi.txt","%20rb");?> HTTP/1.1" 404
> 202 
> "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

-- 
------------------------------------------------------------------------
 Klaus Lichtenwalder, Dipl. Inform.,       http://www.webforum.de/Klaus/
 Fax +49-(0)89-91072699                            Lichtenwalder at ACM.org
 NIC: KL2100, KL76-RIPE                     K.Lichtenwalder at Computer.org
 PGP Key fingerprint = 2658 EA97 E1A1 2680 5ECA  0036 80F5 F250 3CF8
C2C7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://www.dshield.org/pipermail/list/attachments/20020710/c08103d5/attachment.bin


More information about the list mailing list