ASP and PHP pages comprehensively block WVS scanner code

Acunetix web vulnerability plugin is an excellent scanning tool developed in foreign countries. It can help you mine many vulnerabilities on your website, including common sqlinjection, XSS (many people think that they like to use WVS to scan the website to discover XSS, which is said to be his findings ...). Since WVS is so good, we will not give him the chance to access the website, just like blocking SQL injection.

After analyzing the header file during WVS scanning, it basically contains the English name of its website: acunetix, so we started with this name. The following are three versionsCode:

1. asp (jscript) version. For lbs users, you can use this (add or include it in the _ Common. asp file ):Copy codeThe Code is as follows: <%
VaR stopscan = "= WVS pls go away! By oldjun! = ";
VaR requestserver = string (request. servervariables ("all_raw"). tolowercase ();
If (Session ("stopscan") = 1 ){
Response. Write (stopscan );
Response. end;
}
If (requestserver. indexof ("acunetix")> 0 ){
Response. Write (stopscan );
Session ("stopscan") = 1;
Response. end;
}
%>

2. asp (VBScript) version. This can be used by General ASP users, including conn. asp:Copy codeThe Code is as follows: <%
Dim stopscan, requestserver
Stopscan = "= WVS pls go away! By oldjun! ="
Requestserver = lcase (request. servervariables ("all_raw "))
If SESSION ("stopscan") = 1 then
Response. Write (stopscan)
Response. End
End if
If instr (requestserver, "acunetix") then
Response. Write (stopscan)
Session ("stopscan") = 1
Response. End
End if
%>

3. php version:Copy codeThe Code is as follows: <? PHP
$ HTTP = $ _ server ["all_http"];
If (isset ($ _ cookie ["stopscan"]) & $ _ cookie ["stopscan"]) {
Die ("= WVS pls go away! By oldjun! = ");
}
If (strpos (strtolower ($ HTTP), "acunetix ")){
Setcookie ("stopscan", 1 );
Die ("= WVS pls go away! By oldjun! = ");
}
?>

the code is very simple. This article only provides an idea to intercept common WVS scans. If the header information can be customized or met by Zwell's jsky, you can find the most matched one ~~~ From oldjun