PHP漏洞扫描—morfeus fucking scanner

作者：易隐者发布于：2012-7-23 18:01 Monday 分类：网络安全

近段时间在用户处做监测分析时，发现某个互联网的IP与用户的服务器之间交互的TCP会话流量很小，且交互数据包、字节等参数数值较为一致，属于特征比较明显的现象。我们通过科来的TCP会话重组功能，发现了使用的User-Agent是morfeus fucking scanner，如下图所示：

我们通过google搜索关键词：morfeus fucking scanner，查看相关文章，确认其为针对PHP的漏洞扫描行为。

下面将罗列一篇简要介绍morfeus fucking scanner的文章。

【原文链接】：

http://ekle.us/index.php/2007/05/update_on_morfeus_fucking_scanner

【原文全文】：

Update on Morfeus Fucking Scanner

In one of my earlier blogs, I commented that I was seeing a strange user agent in my stats. This user agent went by the name of 'Morfeus Fucking Scanner'. This name obviously caught my eye. I seriously doubt a legitimate user agent would be called that.

In that blog, I asked if anyone had any information on it. I got several replies, which you can see in the comments on that blog. It turns out that Morfeus is a scanner that looks for vulnerabilities in PHP based web sites (as this one is). I guess it failed to find any vulnerabilities in my blogging software because I haven't noticed any problems, or additional files are anything.

One commenter, by the name of Haans Gruber, even provided a solution to prevent it. Interesting name there Haans, either it's a coincidence or he's a big fan of the Die Hard movies... Haans Gruber was the name of the main villain in the first Die Hard movie. Anyway, the solution he provided was to add the following code to your web sites '.htaccess' file. Note that this change will only work for Apache based web servers. If you are running IIS, I'm sure there is a similar way to do it, but you are on your own. Here's the fix:

# Start of .htaccess change.
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^Morfeus
RewriteRule ^.*$ - [F]
# End of .htaccess change.

I've added this fix to my site's .htaccess file. Let's see if it helps.

Thanks Haans!

标签: morfeus fucking scanner PHP漏洞扫描

您对本文的评分:

当前平均分: 10.0(5 次打分)

QQ空间新浪微博腾讯微博人人网更多

« 我的网络分析专家认证证书 | 常见网络分析工具特色功能简介及其在实际工作中的应用之Omnipeek»

发表评论：

蚂蚁网-多维人生，三实而立！

真实-不弄虚，不做假，做自己，不违心；踏实-不浮躁，不盲从，不急功，不近利；实学-不投机，不取巧，勤于学，精于业。