aungkhant
07-02-2008, 03:36 PM
After auditing web server logs, I've found thousands of attack probing entries by bad guys. So, I coded this script.
http://sourceforge.net/projects/phpnobruteforce
(Former name: Php Attack Detection Engine) to detect your web servers/applications being scanned by brute force tools such as WFuzz, OWASP DirBuster and vulnerability scanners such as Nessus, Nikto, Acunetix ..etc. This helps you quickly identify probable probing by bad guys who's wanna dig possible security holes.
For more info (http://yehg.net/lab/pr0js/tools/php-brute-force-detector-readme.pdf)
Download it from:
http://yehg.net/lab/pr0js/files.php/php_brute_force_detect.zip
http://sourceforge.net/projects/phpnobruteforce
(Former name: Php Attack Detection Engine) to detect your web servers/applications being scanned by brute force tools such as WFuzz, OWASP DirBuster and vulnerability scanners such as Nessus, Nikto, Acunetix ..etc. This helps you quickly identify probable probing by bad guys who's wanna dig possible security holes.
For more info (http://yehg.net/lab/pr0js/tools/php-brute-force-detector-readme.pdf)
Download it from:
http://yehg.net/lab/pr0js/files.php/php_brute_force_detect.zip