On Tue, Jan 5, 2016 at 4:16 PM, theresa mic-snare <[email protected]> wrote: > Hi guys, > > rootcheck (system audit) came up with a couple of alerts which reference > this URL....sadly the link is borken... > http://www.ossec.net/wiki/index.php/WebAttacks_links >
It's an old wiki reference, so it's probably long gone. > I've also tried searching the ossec-docs for web attacks...sadly to no > avail. > > anyway idea what it means? because I don't really have a clue what it > means.. > System Audit: Web exploits (uncommon file name inside htdocs) - Possible > compromise. File: /var/www/html/dokuwiki/lib/plugins/config/lang/id. It looks like there is a file named "id" in /var/www/html/dokuwiki/lib/plugins/config/lang. Take a look at that file, try to figure out what it is. > Reference: http://www.ossec.net/wiki/index.php/WebAttacks_links > > thanks, > theresa > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
