List Info

Thread: Looking for information on logs from Mambo or Joomla




Looking for information on logs from Mambo or Joomla
user name
2006-08-16 01:15:08
Hi all,

I'm looking for information on the logs of Apache web
server that uses
Mambo or Joomla CMS.

In recent months some attacks to those CMS's was found.

I'm researching on it trhow the apache logs, if you have
Mambo or
Joomla, even if you didn't have any problem, your logs can
help me a
lot.

I wish some of you could send me, prefereably filtered only
with the
information attack, the constant is the mosConfig string on
the apache
log.


Thanks in advice

-- 
Hugo Francisco González Robledo
Instituto Tecnológico de San Luis Potosí

Llave pública en http://www.honeynet.org.mx

Llave pública en http://ardilla.zapto.org

Preguntale a Google-Earth donde estoy :
http://ardilla
.zapto.org/ubicaHugo.kml

-------------------------------------------
Educación es lo que queda después de olvidar
lo que se ha aprendido en la escuela.
		Albert Einstein
-------------------------------------------
Looking for information on logs from Mambo or Joomla
user name
2006-08-18 17:52:10
Hi Hugo,

I have posted some logs from these attacks in the wiki
of the ossec project:

http://www.ossec.net/wiki/index.php/Apache_attack_sampl
es

Hope it helps. Btw, if you have logs to share with us
over there, it would be great.

http:
//www.ossec.net/wiki/index.php/Log_Samples


Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

--- Hugo Francisco González Robledo
<hugo.gonzalezitslp.edu.mx> escreveu:

> Hi all,
> 
> I'm looking for information on the logs of Apache
> web server that uses
> Mambo or Joomla CMS.
> 
> In recent months some attacks to those CMS's was
> found.
> 
> I'm researching on it trhow the apache logs, if you
> have Mambo or
> Joomla, even if you didn't have any problem, your
> logs can help me a
> lot.
> 
> I wish some of you could send me, prefereably
> filtered only with the
> information attack, the constant is the mosConfig
> string on the apache
> log.
> 
> 
> Thanks in advice
> 
> -- 
> Hugo Francisco González Robledo
> Instituto Tecnológico de San Luis Potosí
> 
> Llave pública en http://www.honeynet.org.mx

> Llave pública en http://ardilla.zapto.org
> 
> Preguntale a Google-Earth donde estoy :
> http://ardilla
.zapto.org/ubicaHugo.kml
> 
> -------------------------------------------
> Educación es lo que queda después de olvidar
> lo que se ha aprendido en la escuela.
> 		Albert Einstein
> -------------------------------------------
> 



		
_______________________________________________________ 
Novidade no Yahoo! Mail: receba alertas de novas mensagens
no seu celular. Registre seu aparelho agora! 
http://br.mob
ile.yahoo.com/mailalertas/ 
 

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )