4 ms·
That’s from a single person most likely, who used sqlmap to test for sql injection. I haven’t seen internet wide attempts of testing sql injections.
by f311a 3y ago
That’s from a single person most likely, who used sqlmap to test for sql injection. I haven’t seen internet wide attempts of testing sql injections.
- willhackett 3y agoOur WAF logs are fun reading. We see so much traffic from bots looking for PHP files and posting to inputs.
- gnyman 3y agoYeah, so much noise. I enjoy screwing around with them on my free time, "imposing cost" by giving back unexpected things. I don't know if it actually does something, but I bet returning either a gzip-bomb or a 5 MiB really obscure (but valid) HTML file will crash quite a few scanners. https://nitter.net/gnyman/status/1181652421841436672 https://nitter.net/gnyman/status/1181652421841436672
- smokeyfish 3y agoAre you familiar with OpenBSD tarpitting?
- gnyman 3y agoNot specifically openBSD but the concept yes, I've played with it also https://nyman.re/super-simple-ssh-tarpit/ https://nyman.re/super-simple-ssh-tarpit/