Hacker Attempt

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • code green
    Recognized Expert Top Contributor
    • Mar 2007
    • 1726

    #1

    Hacker Attempt

    May be the wrong forum but I had this attack via a web form
    Code:
    declare @q varchar(8000) 
    select @q = 0x57414954464F522044454C4159202730303A30303A313527 exec(@q) --
    It didn't get past first base but anybody with the same experience?
    I think the Hex translates to a WAITFOR command.
  • RedSon
    Recognized Expert Expert
    • Jan 2007
    • 4980

    #2
    Looks like an SQL injection attack:

    Comment

    • Atli
      Recognized Expert Expert
      • Nov 2006
      • 5062

      #3
      The hex translates into:
      Code:
      WAITFOR DELAY '00:00:15'
      It just basically freezes the query for 15 seconds. Kind of pointless by itself, really.

      It has no effect on MySQL though. WAITFOR is a T-SQL (MSSQL) command, which doesn't exist in MySQL.

      Comment

      • code green
        Recognized Expert Top Contributor
        • Mar 2007
        • 1726

        #4
        I've googled the hex and it seemed to first appear around April.
        The blame is pointing to a German.

        Quite a few sites seemed to heve been attacked.

        Comment

        Working...