Hacking Through IDSs
127.0.0.1 - - [14/Aug/2002:09:48:14 -0400] [ccc] "HEAD /cgi-bin/test-cgi HTTP/1.0" 404 0 ... -0400] [ccc] "HEAD /cgi-bin/nph-test-cgi HTTP/1.0" 404 0 .... A classic example of a signature that IDSs detect involves CGI scripts. ...
http://www.airscanner.com/pubs/ids.pdf
Intrusion Detection Techniques and Approaches
by T Verwoerd - Cited by 110
http://sureserv.com/technic/datum/pdf/ids/english/Intrusion Detection Techniques and Approaches.pdf
Hacking: The Basics
by Z Wilson - Cited by 4
http://people.emich.edu/pstephen/E_M_U_files/LinuxSecurity/Hacking - The Basics.pdf
State of Utah
Technical Architecture
3212 - WWW NPH-TEST-CGI Attack. 3213 - WWW TEST-CGI Attack ... 3221 - WWW cgi-viewsource Attack. 3222 - WWW PHP Log Scripts Read Attack ...
http://cio.utah.gov/docs/IDSStd8.17.00.pdf
Taint-Enhanced
Policy Enforcement: A Practical Approach to Defeat ...
by W Xu - Cited by 145
http://seclab.cs.sunysb.edu/seclab/pubs/usenix_sec06.pdf
Web
Server-Side Security
29 Sep 2006 ... Web servers often come with default scripts — some of these are insecure s. Example: nph-test-cgi that used to come with Apache ...
http://www.cs.columbia.edu/~smb/classes/f06/l09.pdf
NetRecon 3.5 SU 4
HTTP allows execution of nph-publish CGI. 92. HTTP allows execution of nph-test-cgi CGI .... NetRecon can discover a Tomcat Java Server that allows script ...
http://securityresponse.symantec.com/avcenter/security/NetRecon/Rn_nr35su5.pdf
A Software Fault Tree Approach to Requirements Analysis of an
...
by G Helmer - Cited by 73
http://eref.uqu.edu.sa/files/a_software_fault_tree_approach_to_requir.pdf
Common Security Exploit and Vulnerability Matrix v2.0
test-cgi nph-test-cgi. Website Server. Bay Networks Annex. Terminal Server .... postinst installation script for Proftpd in Debian 2.2 does ...
http://taz.newffr.com/TAZ/Sysadm/unix.seku/integrity/Tripwire_exploit_poster.pdf
Report of a Nessus scan
Sambar Web Server CGI scripts. • Determine which version of BIND name daemon is .... Netscape Messenging Server User List. • nph-test-cgi. • nph-publish.cgi ...
http://www.rejas.se/doc/kurser/sakB/sakB-1.1/nessus/ftp.lab.rejas.net.pdf
Chapter 2 Virtual web database environments
nph-test-cgi script that is designed to display information about the web server environment. It parses data requests too liberally and thus allows a person ...
http://ujdigispace.uj.ac.za:8080/dspace/bitstream/10210/490/3/BChap02VWB.pdf
'ScienceApplications International Corporation (SAIC) and
HTTPD Type Check. Nph-Test-CGI (CGI script) Check. ICMP (Internet Control Message. Vulnerable HTTPD Check. AnyForm CGI Check. Protocol) redirects to PCASSO ...
http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2232677/pdf/procamiasymp00004-0703.pdf
Cisco Intrusion Detection System Signatures and Recommended Alarm
...
WWW NPH-TEST-CGI Attack. Medium. 3213. 0. WWW TEST-CGI Attack .... WWW CGI Script Center Account Manager Attack Medium ...
http://www.doh-net.com/ccnp_ccnp/ccna_intusion/a2/a2_0_0/appendixB.pdf
FAQ:
Network Intrusion Detection Systems 0. Information about this
FAQ
handler, webdist.cgi, php.cgi, files.pl, nph-test-cgi, nph-publish, AnyForm, FormMail. If you see somebody trying to access one or all of these CGI scripts ...
http://www.biblioteca.co.cr/pdf/network-intrusion-detection.pdf
Vulnerability
Assessment of the Commission's Automated Information ...
APPENDIX E: "NPH-TEST-CGI" CGI EXPLOIT OUTPUT (LISTING HOME DIRECTORIES) ... servers for vulnerabilities, including exploitable CGI scripts. 2.8 Toneloc ...
http://www.usitc.gov/oig/documents/OIG-IR-04-97.pdf
FIPS Security Policy.book
6 Aug 2004 ... CGI Scripts, including Phf, EWS, info2www, TextCounter, GuestBook, Count.cgi, handler, webdist.cgi,php.cgi, files.pl, nph-test-cgi, ...
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp468.pdf
- 1 - 平成14年 7月22日
脆弱性チェック報告書 下記の通り報告 ...
Delete these scripts and any other scripts in the test or samples ... For more information about the nph-test-cgi vulnerability, please ...
http://www.jriit.jp/scan/sample_saint.pdf
Page 1
Copyright © 2001- 2005 www.abhinav.net Your Gateway To ...
Count.cgi, handler, webdist.cgi, php.cgi, files.pl, nph-test -cgi, ... these CGI scripts (and you don't use them), then it is clear indication of an ...
http://www.iaura.com/IntrusionDetection2.pdf
Nikto Linux
Laboratory
In this lab you will install and update Nikto, perform web server tests and ..... 80 GET /scripts/nph-exploitscanget.cgi - 404 Mozilla/4.75+(Nikto/1.34+) ...
http://www.nwcet.org/downloads/niktolab.pdf
Web-Server
Seguro:APACHE
Nos scripts CGI's devemos evitar entradas ilegais na URL, execução de .... Count.cgi. 1.0-2.3 webdist.cgi. 1.0-1.2 php.cgi. Até 2.0 nph-test.cgi ...
http://www.rederio.br/downloads/pdf/nt00900.pdf
S
N O R T — L I G H T W E I G H T I N T R U S I O N D ...
by M Roesch - 1999 - Cited by 1525
http://www.usenix.org/event/lisa99/full_papers/roesch/roesch.pdf
Web Seguro
Distribui software php.cgi. Até 2.0. Ling. de scripts nph-test.cgi. Todas ? nph-publish. 1.0-1.1 ? AnyForm. 1.0. Cria formulários. FormMail ...
http://www.rnp.br/_arquivo/documentos/pal0103.pdf
WEB
SERVER SECURITY TECHNICAL IMPLEMENTATION GUIDE Version 6 ...
11 Dec 2006 ... Glimpse (PERL scripts) Web Search Engine. - info2www, Versions 1.0-1.1. - Webdist.cgi. - php.cgi. - files.pl. - nph-test-cgi. - nph-publish ...
http://iase.disa.mil/stigs/stig/Web-Server-STIG-V6R1.pdf
slides - CGI Scripting for Programmers:
Introduction
in the response q NPH mode ...... the CGI q Scripts must identify their interpreter ..... "Subject: A test message",. "",. "Hello World!"); ...
http://www-uxsup.csx.cam.ac.uk/~jw35/courses/2003-cgi/slides-print.pdf
Network Security - ISA 656 Web Security
What is really being served? s. Web servers often come with default scripts — some of these are insecure s. Example: nph-test-cgi that used to come ...
http://cs.gmu.edu/~astavrou/courses/isa_656_F07/ISA_656_F07_L7-Web_Security.pdf
Migration Guide
much more comprehensive and flexible script execution capability that can be very useful for ..... CGI nph-test-cgi. 290. 2002613 HTTP_SGI_Wrap ...
http://documents.iss.net/literature/RealSecure/RSNS7.0_MigrationGuide.pdf
Upgrading to P-Synch
6.2
http://server/scripts/psynch/nph-program.exe. CGI programs in P-Synch .... Test the administrative module and verify that all existing features are intact. ...
http://www.psynch.com/docs/upgrade.pdf
Cisco IOS IPS Supported Signature List
WWW NPH-TEST-CGI Bug. SERVICE.HTTP. 3213-0. WWW TEST-CGI Bug. SERVICE.HTTP ...... CS .cgi Script Cmd Exec. SERVICE.HTTP. 5243-1. CS .cgi Script Cmd Exec ...
http://www.ciscosystems.sc/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/prod_white_paper0900aecd8039e2e4.pdf
Symantec™ Critical System Protection Detection Policy Reference
Guide
Sambar test-cgi Access. Detects attempted access to the test-CGI script. This CGI ...... Detects activity associated with the Nph-test-cgi program. ...
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_critical_system_protection/5.0/manuals/5.2/ids_ref.pdf
FortiGate NIDS Guide
CGI Scripts, including Phf, EWS, info2www, TextCounter, GuestBook, Count.cgi, handler, webdist.cgi,php.cgi, files.pl, nph-test-cgi, nph-publish, AnyForm, ...
http://www.fortigate.be/Files/2.50/v2.50_FortiGate_NIDS_User_Guide_23_June_2003.pdf
Cisco IOS IPS Supported Signature List For 5.x Signature Format in
...
WWW NPH-TEST-CGI Attack service-http. 3213-0. WWW TEST-CGI Attack service-http ..... WWW CGI Script Center Account Manager Attack service-http ...
http://cisco.biz/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/prod_white_paper0900aecd8062ac75.pdf
NAME DESCRIPTION
Header" (NPH) script. Check your server documentation to see what it supports. "Parsed Header" scripts are simpler in various respects. The CGI ...
http://perldoc.perl.org/perlfaq9.pdf
CGI
to mod_perl Porting. mod_perl Coding guidelines.
24 May 2010 ... To make sure you don't miss these bugs always test your CGI in single ...... 1.23NPH (Non Parsed Headers) scripts. CGI to mod_perl Porting. ...
http://perl.apache.org/docs/1.0/guide/porting.pdf
The 10 Most Critical Inet Security Vulnerabilities
C. Remove unsafe CGI scripts http://www.cert.org/advisories/CA-97.07.nph-test-cgi_script.html http://www.cert.org/advisories/CA-96.06.cgi_example_code.html ...
http://www.lfca.net/Reference Documents/The 10 Most Critical Inet Security Vulnerabilities.pdf
Title
Links and Forms
by D Info - 1995Script Notes: I used Redirection Script, nph-redir.cgi, Version 2.3, .... Let's test out the manipulation of groups by ripping ...
http://www.math.uakron.edu/~dpstory/tutorial/pdfmarks/forms.pdf
Wege zur Entdeckung von Einbrüchen in Computernetze
File Format: PDF/Adobe Acrobat - View as HTML
ftp://ftp.freexp.de/science/nids/Studienarbeit_komplett.pdf
Aspectos de
Segurança na Internet
Ataques a servidores Web (CGI scripts). – count.cgi. – webdist.cgi. – nph-test-cgi. Notas: 1998. • Buffer overflow em clientes de Mail ...
http://www.cert.br/docs/palestras/nbso-comdex2001.pdf
CyberCop
Scanner Vulnerability Guide
nph-cgi-test. This script can be subverted to list files and directories, anywhere on the host machine. This check searches for the nph-test-cgi script ...
http://capirossi.org/info/Securite/Vulnerabilities.pdf
CGI Programming on the World Wide Web
Finally, Chapter 12, Debugging and Testing CGI Applications covers techniques ...... http://your.machine/cgi-bin/nph-count.pl. When you run this CGI script, ...
http://portal.aauj.edu/portal_resources/downloads/web/cgi.pdf
CGI
Programming on the World Wide Web
File Format: PDF/Adobe Acrobatby A Appendix - 1996Chapter 12, Debugging and Testing CGI Applications, lists common errors and ...... http://your.machine/cgi-bin/nph-count.pl. When you run this CGI script, ...
http://rottenlogic.com/books/Cgi.pdf
Installing
LUCI on Windows 2003
In windows explorer, create a folder that will hold your luci scripts. The folder will be referenced from the web. ... Therefore, renaming luci.cgi to have the nph prefix (nph- luci.cgi) will have no effect on the ... Step 9: Test Luci ...
http://luci.sourceforge.net/other/win2003_05_30_2006.pdf
A Robust Link-Translating Proxy Server Mirroring the Whole Web
by Z Mao - Related articles
http://research.microsoft.com/en-us/um/people/cormac/papers/proxy.pdf
Ultra AutoCAD Tool
https://www.regnow.com/softsell/nph-softsell.cgi?item=4459-46 .... Therefore, you should test this operation with one of your own drawing files with image paths. ... Script files can also be run from Ultra AutoCAD Tool in “quiet” mode ...
http://www.getfilez.com/acadtool.pdf
Cisco IOS IPS Supported Signature List
WWW NPH-TEST-CGI Bug. SERVICE.HTTP. 3213-0. WWW TEST-CGI Bug. SERVICE.HTTP ...... CS .cgi Script Cmd Exec. SERVICE.HTTP. 5243-4. CS .cgi Script Cmd Exec ...
http://www.ciscosystems.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/prod_white_paper0900aecd8039e2e4.pdf
分散コンピューティング環境における ログ管理・解析に関する研究 ...
Match string in content scripts/snork.bat? HTTP ../.. Exploit ... cgi-bin/nph-test-cgi. Novell HTTP Server Convert exploit Match pattern in Client command ...
http://www.ipa.go.jp/security/kobo/11fy/report/isec-rd-010016.pdf
Offre FortiGate
Passerelles de sécurité intégrant de façon unique ...
CGI scripts comme Phf, EWS, info2www, TextCounter, GuestBook, Count.cgi, handler, webdist.cgi,php.cgi, files.pl, nph-test-cgi, nph-publish, AnyForm, ...
http://www.lob.com/PDF/Fortinet_FR.pdf
ลักษณะและผลกระทบของการการบุกรุก
พัฒนาวดีศิว
Sun Sendmail Vulnerability. - Commodore Amiga UNIX finger Vulnerability. - Vulnerability in the httpd nph-test-cgi script. - Ghostscript Vulnerability ...
http://csn.cs.psu.ac.th/white/intrusion.pdf
SecureSoft SNIPER IPS White Paper
2008年1月1日 ... faxsurvey, CGI htmlscript, CGI info2www, CGI nph-test-cgi, ... /scripts/wsisa.dll/Wservice=anything?, .htaccess, .htpasswd,. /…….., . ...
http://www.securesoft.co.jp/products/SNIPER_IPS_A_White_Paper_20080101.pdf
READ ME FIRST!
Some third party applications require helper scripts to be installed on the Mascot web server. .... 2445 nph-daemon_helper.pl missing from shipper (required by GPS Explorer) ... 2488 Installer needs to configure IIS 6 to allow cgi and x-cgi .... 2744 Test search fails when there are multiple sub-clusters ...
http://bio-mascot1.chem.umu.se/mascot/pdf/release_notes.pdf
Introduction
to CGI
15 Apr 2000 ... For instance, to test a. Perl CGI script called foo.plx, you'd save it as ...... Parsed Headers (NPH) by using the -nph argument. ...
http://blob.perl.org/books/beginning-perl/3145_Chap12.pdf
1 2
