Home | Projects | Downloads | Contact Me | SQL Injection Attacks

My Entertainment for the Day

If you have WhosOnCFC up and running and a good sense of humor, I threw this little script together real fast so I could see how many SQL injection attacks I have received.

<cfset myQuery=application.whoson.WhosOnline(true,true)>
<cfset attacks=0>

<cfloop query="myquery">
   <cfif findNoCase("cast(",myQuery.CurrentPage)>
   <cfset attacks=attacks+1>
</cfif>
</cfloop>
<br>
<br>

<cfoutput>SQL Injection attacks in the last #application.whoson.getCurrentControlSet().trackTime# hours: #attacks#</cfoutput>

I had really slowed down there for a little while, alas, it looks like business is picking up. 28 attacks and growing so far today.

Too bad the page everyone is attacking is fed through RSS.... ;)

And So It Begins....

I generally check the activity on my site a few times a day when I ran across this little jewel.  I guess the SQL injection attacks that have been running around lately have finally caught up with me.  I have not checked my database to see if anything has been affected, but I trust anything from Ray implicitly.  He's the ColdFusion Jedi, after all. ;)

 

hackattempt

WhosOn Stats Page Disabled on My Blog

The last couple of days I have noticed a disturbing trend on my WhosOn stats page.   A server out of Amsterdam has been linking to my stats page every hour and 15 minutes or so to get its web sites listed in the referrer stats.  This alone irks me.  The stats page is there so folks can view a sample of the reporting in WhosOnCFC and it is not necessarily there to increase your page rank.  The domains in question would make Attila the Hun blush with shame and as I am not in the business of promoting pornography it will not be tolerated.

It feels like Monday....

Well, actually yesterday felt like Monday, today it is just continuing for good measure.  Last night the hard drive on my Vista Ultimate Media Center PC decided it was going to crap out.  No big deal.  Luckily, all my episodes of Family Guy, Futurama, and Thomas the Tank Engine and Friends (READ: BABY SITTER)  luckily those  were stored on my TB external drive.

When I originally bought my copy of Vista, I just bought the upgrade since I did not feel like forking out all the bucks for the full version.  This is unfortunate as you have to run the setup from within Windows in the upgrade version.  No big deal, I still have my registration key for Windows XP so I figured I would just go ahead and re-install that version.  In the meantime I figured I would run Darik's Boot and Nuke to wipe the hard drive and start the computer clean as a whistle.

In goes the Windows XP SP2 installation disc.  Windows setup starts, loads all the system files and then I get to the "Press Enter to Install Windows" prompt.  Pushing enter I then get told Windows cannot find my hard drive.  I have the case open already so I look in there.  Yep.  There it is.  I check the bios and just for good measure run diagnostics on the HD just to make sure everything is fine....  My system has SATA drives which Windows XP does not like without the SATA controller drivers installed, but Windows Vista can handle the SATA controller with no problems....

So then I have the bright idea to install Vista with the product key off of my laptop, then I will just change the product key back to my upgrade version.  I had everything installed and went to change the product key back only to find out that you cannot change a full installation product key to a upgrade installation product key as it was not meant to be used on a clean install.  So now I am having to upgrade the copy I just installed....

It has been a great day.

The perfect end to a perfect week

Well, I have spent most of the afternoon pouring through web server logs and my file system.  It would appear that someone in France was kind enough to infect my server with an IRCBot.  I do not know exactly who is involved, but they were using irc.powerserv35.net:16667 in the #psyko_home channel.  I tried to log on and find whoever was the bot master, however I was K-Lined from the server pretty quick.  Such is life.

Going back through the directories and files they were kind enough to leave on my server I tracked down where the files originally came from.  The server is hosted in Japan (p11093-ipadfx01kobeminato.hyogo.ocn.ne.jp [220.98.242.93]).  You can point an FTP client to that address and login as anonymous/anonymous@OnThe.net .  Konichiwa bitches.

Anyway, it looks like next week I am going to be plugging security holes wherever I can find them.  I thought I had things tightened down pretty good.  That is what I get for thinking.

Driving in South Mississippi

Just a little Public Service Announcement.  Driving around it would seem like some people need a little refresher course.

Stop Signs
You too can stop at stop signs.  That little white line that generally accompanies aforementioned stop sign is not just there for decoration.  This is where the front of your car is supposed to be.  No need to get all tricky and have it exactly bisect your car or try to put your rear bumper on it.  Oh, also, you may want to stop.  If you are at an intersection with more than one stop sign, the person who arrives at the stop sign first is the first to go.  Just because you slowed down first does not necessarily mean you go first.

Yield Signs
A yield sign is much like a stop sign without all the commitment.  Yield is short for "yield to right of way."  It works like this, if there is not a car coming you can go.  If there is a car coming, you slow down and let the car past and then go.  This does not mean you punch it and hope you can get in front of the car so he can slam into the back of you or run it off the road.

Interstates
The interstate is a magical and wondrous place.  This is the South, and yes, everyone loves Nascar, but you are not [insert your drivers name here], chances are you don't drive as good as they do and you are not in Nascar.  It is some pretty simple math here.  Traffic moves as fast as the slowest driver.  This means a car traveling at 95 miles per hour behind a car doing 75 miles an hour is generally a bad thing.  Also, if you are on the interstate and doing 60 miles per hour, you need not feel compelled to get in the fast lane and block all the traffic.  I know some of you may feel the need to save us all from ourselves, but that is the government's job.

While we are on the subject of the fast lane...  Those little turn bays you see spaced out periodically with the signs that say "For law enforcement and  Emergency Use Only" generally do not apply to you, unless perhaps you are a cop or an ambulance driver and I stand corrected.  But, for arguments sake, if your name is Jim Joe Bob and you come to a complete stop on the interstate to make a U turn and almost cause a pile-up because your good buddy just called and said Wal-Mart has a sale on toothbrushes, that does not qualify as an emergency.  Sorry.

Layout: Shane Zehnder ::: BlogCFC was created by Raymond Camden. ::: This blog is running version 5.9.