[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#151711: Badurl still seems to work



Hi,
Fwiw, I've tested badurl under windows using cygwin's perl 5.8.5 and the
windows Apache 2.0.50.

- It seems to put in sleeps properly (at least it sleeps when the URL is
$evil, and doesn't when it's not).
- The script logs $evil URL's as attacks in the error log (stderr).
- I can't test the load feature under windows as uptime doesn't report
the load.
- I haven't tested to see what happens if an $evil URL is a desired URL.
- There should probably be more $evil URL's defined (and the list should
evolve, but doesn't have to evolve fast).

Since this script is so small I don't know if it's worth putting in a
package by itself. I don't know of any packages it should be a part of
either though.

     Drew Daniels



Reply to: