Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in

  FAQ | Search | Memberlist | Usergroups | Statistics | Profile | Log in to check your private messages | Log in | Register

Anyone familiar with Whisker?
 View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
FnkDrSpok
n00b
n00b


Joined: 02 Oct 2004
Posts: 35
Location: Virginia
PostPosted: Tue Jun 21, 2005 4:47 pm    Post subject: Anyone familiar with Whisker? Reply with quote
Just as the subject says, I'm looking for some information on Whisker. In portage there is a package called libwhisker and I believe it's the same thing but not 100% sure. I emereged libwhisker but it does not show up in any command tree:
Code:
# which whisker
which: no whisker in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin:/usr/i686-pc-linux-gnu/gcc-bin/3.3.5-20050130:/usr/i686-pc-linux-gnu/gcc-bin/3.3.5-20050130)



For all that do not know what whisker is, it's suspposed to a tool to test weaknesses in apache mainly against the website directory. It's supposed to give you some sort of output that shows what's vulnerable. Anywho, I plan on running this against my own site to test holes or things similar. Any help here would be appreciated.
_________________
Merging into Gentoo from Red Hat ES and Solaris.
Back to top
View user's profile Send private message
FnkDrSpok
n00b
n00b


Joined: 02 Oct 2004
Posts: 35
Location: Virginia
PostPosted: Wed Jun 22, 2005 2:20 am    Post subject: Reply with quote
**BUMP**

No help here? I keep checking my apache logs and I see someone browsing all the directories associated with apache and I'm wondering how they have that much access to what's going on. Here is what the log looks like
Code:
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats.pl
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/stats
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/stats
[Wed Jun 15 05:06:26 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats.pl
[Wed Jun 15 05:06:27 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats.pl
[Wed Jun 15 05:06:27 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats.pl
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats.pl
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/stats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/stats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/stats
[Wed Jun 15 05:06:28 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats.pl
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/stats
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/stats
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats.pl
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/stats
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats.pl
[Wed Jun 15 05:06:29 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:07:03 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats
[Wed Jun 15 05:07:03 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/awstats.pl
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] script not found or unable to stat: /var/www/localhost/cgi-bin/stats
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/stats
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/awstats.pl
[Wed Jun 15 05:07:04 2005] [error] [client 64.191.65.21] File does not exist: /var/www/localhost/site/cgi
[Sat Jun 18 20:55:07 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/...
[Sat Jun 18 20:55:07 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:08 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:08 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:09 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:09 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:10 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:10 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:10 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin
[Sat Jun 18 20:55:11 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin
[Sat Jun 18 20:55:11 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats.pl
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/...
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/...
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/...
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats
[Sat Jun 18 20:55:12 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:13 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/adm
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:14 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/admin
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:15 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/aws
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/bin
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin
[Sat Jun 18 20:55:16 2005] [error] [client 168.131.90.34] File does not exist: /var/www/localhost/site/awstats-cgibin


It looks like two different people were trying the same thing and my apache docroot permissions are set to 744 and index.html is set to 755. I heard whisker basically does the same thing that they are doing and the best advice someone told me is know what weapon the enemy uses, that way you will know how to stop it. Any help here would be appreciated.
_________________
Merging into Gentoo from Red Hat ES and Solaris.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



 Links: forums.gentoo.org | www.gentoo.org | bugs.gentoo.org | wiki.gentoo.org | forum-mods@gentoo.org

Copyright 2001-2025 Gentoo Foundation, Inc. Designed by Kyle Manna © 2003; Style derived from original subSilver theme. | Hosting by Gossamer Threads Inc. © | Powered by phpBB 2.0.23-gentoo-p11 © 2001, 2002 phpBB Group
Privacy Policy