Site Security Experience Sharing

&http://www.aliyun.com/zixun/aggregation/37954.html ">nbsp; There are many kinds of attacks, which can actually be categorized into two types: Data destruction type and service failure type.

Data destruction type generally through intrusion, infiltration, etc. into the server inside, directly resulting in data theft, delete, etc., this kind of general by blocking various loopholes, do a good job of data backup to prevent. Confidential data to use security encryption measures, the original and ciphertext must not be put together. Service failure of the common DDoS, it seems that there is no bar to see the shadow of the means to defense. But basically a person kind of no matter, hehe.

The website is hacked from the form into the Web attack and the system attack, the Web attack mainly uses the website's script flaw to carry on, the system attack is carries on to the website's server's flaw, also includes the application software loophole.

Let's take a look at the illegal access records of the site www.114mulu.com (114 Site Directory) during the time of our weekly test:

/robots.txt
/mirserver.rar
/come.asp
/web.rar
/www.zip
/www.rar
/wwwroot.rar
/wwwroot.zip
/web.zip
/tomdb.mdb
/packet.mdb
/hsh.mdb
/upfile_flash.asp
/hytop.mdb
/mirserver1.rar
/ewebeditor/
/eweb/
/admin/editor/
/admin/webedit/
/admin/htmledit/
/ewindoweditor/
/admin888/ewebeditor/

/admin/uppic.asp
/asp_bin/webeditor/
/admin/eweb/
/webadmin/webaction/
/webeditor/
/ userreg.asp
/admin/edit/
/manage/webeditor/
/manage/editor/
/qq.txt
/data/ewebeditor/
/ redirect.asp
/webedit/
/newsadmin/ubb/
/htmledit/
/cmseditor/
/admin/ewebeditor/
/htmleditor /
/editor/
/lavery_edit/
/admin/pro_admin/htmledit/
/include/upfile_flash.asp
/edit/
/admin/ webeditor/
/manage/ewebeditor/
/admin/southidceditor/
/manage/edit/
/admins/upfile_flash.asp
/ qq.asp
/log.txt
/myup.asp
/mirserver2.rar
/admin/upfile_flash.asp
/diy.asp
/%e7%89%88%e6%9c% Ac.rar
/bbs/cmd.asp
/shell.asp
/mirserver4.rar
/css.asp
/muonline.rar
/mirserver5.rar
/ bbs/myup.asp
/mirserver3.rar
/xiao.asp
/bbs/css.asp
/pass.txt
/cmd.asp
/wolserver.rar
/ bbs/diy.asp
/mima.txt
/log.asp
/password.txt
/servusu.asp
/ftp.txt

/onews.asp
/asp
/123.txt
/bbs/digshell2.asp
/tmdqq.asp
/123.rar
/web.config
/ Htdocs.rar
/data/dvbbs8.mdb
/ewebeditor/db/ewebeditor.mdb
/mirserver11.rar
/111.rar
/bbs/ Servu.aspx
/%e8%80%81%e5%8c%ba.rar
/bbs/data/dvbbs7.mdb
/fckeditor/editor/fckeditor.html
/ aspadmin.asp
/data/data.mdb
/digshell2.asp
/conn.asp
/sql.rar
/beifen.zip
/bbs/data/ Dvbbs8.mdb
/bbs/servu.asp
/data/link.mdb
/data/dvbbs7.mdb
/jinhuqq2007.txt
/otype.asp
/ Images/loading.gif
/conn.asp.bak
/upfile_flash1.asp
/aaa.asp
/cmirserver.rar
/servu.aspx
/% E5%a4%87%e4%bb%bd.rar
/admin/htmledit/db/ewebeditor.mdb
/inc/conn.asp
/jinhuqq.txt
/bbs/data/ Dvbbs6.mdb
/linki
/beifen.rar
/manage/login.asp
/shaoerjiaoyu/427.asp
/fck/editor/ fckeditor.html
/fckeditor/editor/filemanager/browser/default/browser.html
/qq2008jh.txt
/%e6%96%b0%e5 %8c%ba.rar
/1.rar
/editor/editor/fckeditor.html
/data.asP
/digshell0.asp
/su.asp
/mhxy/data.asp