Small scripts completely block WVS Scanners

From oldjun (http://www.oldjun.com /)
Recently, I found many colleagues favored my website. When my colleagues analyzed the website log, I was surprised to find that nearly 1 MB of logs were used to test the security of my website, at least MB of logs are from WVS.

Acunetix Web Vulnerability plugin is an excellent scanning tool developed in foreign countries. It can help you mine many vulnerabilities on your website, including common SQLinjection, XSS (many people think that they like to use WVS to scan the website to discover XSS, which is said to be his findings ...). Since WVS is so good, we will not give him the chance to access the website, just like blocking SQL injection.

After analyzing the header file during WVS scanning, it basically contains the English name of its website: acunetix, so we started with this name. The following code is available in three versions:

1. ASP (JScript) version. For LBS users, you can use this (add or include it in the _ common. asp file ):

<%
Var StopScan = "= wvs pls go away! BY oldjun! = ";
Var requestServer = String (Request. ServerVariables ("All_Raw"). toLowerCase ();
If (Session ("stopscan") = 1 ){
Response. Write (StopScan );
Response. End;
}
If (requestServer. indexOf ("acunetix")> 0 ){
Response. Write (StopScan );
Session ("stopscan") = 1;
Response. End;
}
%>
2. ASP (VBscript) version. This can be used by General asp users, including conn. asp:

<%
Dim StopScan, RequestServer
StopScan = "= wvs pls go away! BY oldjun! ="
RequestServer = Lcase (Request. ServerVariables ("All_Raw "))
If Session ("stopscan") = 1 Then
Response. Write (StopScan)
Response. End
End If
If instr (RequestServer, "acunetix") Then
Response. Write (StopScan)
Session ("stopscan") = 1
Response. End
End If
%>
3. PHP version:

<? Php
$ Http = $ _ SERVER ["ALL_HTTP"];
If (isset ($ _ COOKIE ["StopScan"]) & $ _ COOKIE ["StopScan"]) {
Die ("= wvs pls go away! BY oldjun! = ");
}
If (strpos (strtolower ($ http), "acunetix ")){
Setcookie ("StopScan", 1 );
Die ("= wvs pls go away! BY oldjun! = ");
}
?>
The code is very simple. This article only provides an idea to intercept common WVS scans. If you can customize the header information or encounter zwell's JSKY, you can find the most matched one ~~~