HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Strange Url Based Hack Attempt?Strange Url Based Hack Attempt?
Previous
 
Next
New Post
9/8/2008 5:18 PM
 

Tralwing my exception log today I found a request from a url looking something like this:

/?dodgydomain.ru?upload.txt??

An exception was thrown by asp.net so I'm not worried.  I just wondered if anyone knows what they're trying to do.  Is it a XSS attack, or are they trying to post content?   My server runs with no extensions, so the request wasn't blocked outright.

 
New Post
9/8/2008 5:29 PM
 

it looks like a simple automated attempt to try and add redirects to url's - it's malformed as it relies of extensions and (probably) the existance of querystring parameters - typically these rely on certain pieces of software to have known issues . It's not a problem in dotnetnuke, it's basically weblog noise, if the exception log wasn't there you probably wouldn't be even aware of them.

Cathal

 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Strange Url Based Hack Attempt?Strange Url Based Hack Attempt?


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

Attend A Webinar
Free Demo Site
Download DotNetNuke Professional Edition Trial
Have Someone Contact Me

Like Us on Facebook Join our Network on LinkedIn Follow DNN Corporate on Twitter Follow DNN on Twitter

Advertisers

DotNetNuke Scoop!

Sponsors

DotNetNuke Corporation

DotNetNuke Corp. is the steward of the DotNetNuke open source project, the most widely adopted Web Content Management Platform for building web sites and web applications on Microsoft .NET. Organizations use DotNetNuke to quickly develop and deploy interactive and dynamic web sites, intranets, extranets and web applications. The DotNetNuke platform is available in a free Community and subscription-based Professional and Enterprise Editions with an Elite Support option. DotNetNuke Corp. also operates the DotNetNuke Store where users purchase third party apps for the platform.