c99shell - /etc/passwd

[AlexisMeroni]

Hello,
How prevent the acces to /etc/passwd with the c99 shell.

Thank you,
Alexis M.

 

[AlexisMeroni]

UP Please

 

[robb3369]

Check out CXS... ConfigServer eXploit Scanner (cxs)... This will scan for scripts (regardless of the name of the script) that have code that accesses the /etc/passwd file... You can set the scanner to remove and quarantine those scripts...

Also, there are mod_security rules you could add to prevent execution of the scripts...
https://www.atomicorp.com/products/modsecurity.html

 

[AlexisMeroni]

There is no free solution? : s

 

[PenguinInternet]

Yes, you could code something yourself Be fair, people deserve payment for coding decent scripts and I'd highly recommend CXS

 

[24x7server]

You can install mod_security with delayed rules on your server to protect your /etc/passwd file

http://updates.atomicorp.com/channels/rules/delayed/

Atomic ModSecurity Rules - Atomicorp Wiki