libWWW perl library, scriptkiddies denied PDF Print E-mail
User Rating: / 3
PoorBest 
Written by Bart Dorlandt   
Friday, 04 January 2008 16:07

libwww-perl (LWP) is fine WWW client/server library for Perl. Unfortunately this library used by many script kiddy, crackers, and spam bots. Of course you don't want them on your website.

So how to see if they are trying to hack your website. Take a look in your access log to see a match, by doing: (this might be a different location)

grep ‘libwww-perl’ /var/www/logs/access.log

An other option is to install JoomlaStats. With this tool you can get a lot of information in a nice overview. Take a look at the visitors section to see any libWWW browsers.

How to deny these scripts:

If you aren't using your .htaccess file yet, move your htaccess.txt to .htaccess

mv htaccess.txt .htaccess

open your .htaccess file and add the following lines to the end. 

####   Stop libWWW hackers ####
SetEnvIfNoCase User-Agent "^.*libwww-perl" block_bad_bots
SetEnvIfNoCase User-Agent "^.*psycheclone" block_bad_bots
Deny from env=block_bad_bots 

Thanks NixCraft for the post.There is also a perl script here which can help you test it.

Be aware that this is far from a replacement of chrooted apache. Which is of course the best and by default enabled in OpenBSD. See this section for more information about OpenBSD

Last Updated on Friday, 04 January 2008 16:53
 


Related items: