Databases
StackOverflow2013
Postsdbo
PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
    primarykey
    data
    text
    <p>What I'm looking for is the following:</p> <ol> <li>What are the attacks below trying to do?</li> <li>Since an exception was thrown did the attack fail?</li> <li>Are there any possible attacks that could have been thrown similar to these that may have went through. </li> <li>Any links that lead to non-hacker friendly information so I can get up to speed on the evils of our world.</li> </ol> <p>Answers will be given for partial answer since this is a long post. If I posted incorrectly or should have posted elsewhere let me know and I will correct. If you need more information please let me know also. Thanks in advance.</p> <p>Site background ASP.NET 4.0, MVC 2.0, LLBLGEN DataAccess Layer, Ninject as you can tell below, MS SQL 2008.</p> <ol> <li><p>Exception message: A potentially dangerous Request.Path value was detected from the client (&amp;). Request URL: <a href="http://www.domain.com/)&amp;&amp;a.endsWith" rel="nofollow">http://www.domain.com/)&amp;&amp;a.endsWith</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/);if(a.NumberGroupSeparator!==n)c=c.split(n).join" rel="nofollow">http://www.domain.com/);if(a.NumberGroupSeparator!==n)c=c.split(n).join</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name ',b=a.indexOf('. Request URL: <a href="http://www.domain.com/,b=a.indexOf" rel="nofollow">http://www.domain.com/,b=a.indexOf</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.NotImplementedException" rel="nofollow">http://www.domain.com/Sys.NotImplementedException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/,a),d=e.indexOf" rel="nofollow">http://www.domain.com/,a),d=e.indexOf</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/,String.format(Sys.Res.enumInvalidValue,c.split" rel="nofollow">http://www.domain.com/,String.format(Sys.Res.enumInvalidValue,c.split</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.ParameterCountException" rel="nofollow">http://www.domain.com/Sys.ParameterCountException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/,Sys.EventArgs);Type.registerNamespace" rel="nofollow">http://www.domain.com/,Sys.EventArgs);Type.registerNamespace</a>(</p></li> <li><p>Exception message: A potentially dangerous Request.Path value was detected from the client (&amp;). Request URL: <a href="http://www.domain.com/);if(a&amp;&amp;a.tagName.toUpperCase()===" rel="nofollow">http://www.domain.com/);if(a&amp;&amp;a.tagName.toUpperCase()===</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.InvalidOperationException" rel="nofollow">http://www.domain.com/Sys.InvalidOperationException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name 'Sys.ArgumentOutOfRangeException'. Request URL: <a href="http://www.domain.com/Sys.ArgumentOutOfRangeException" rel="nofollow">http://www.domain.com/Sys.ArgumentOutOfRangeException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/action" rel="nofollow">http://www.domain.com/action</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.FormatException" rel="nofollow">http://www.domain.com/Sys.FormatException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/)a.value=" rel="nofollow">http://www.domain.com/)a.value=</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: class=true;Number._typeName=">http://www.domain.com/;Date._<em>class=true;Number.</em>_typeName=</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.ArgumentNullException" rel="nofollow">http://www.domain.com/Sys.ArgumentNullException</a></p></li> <li><p>Exception message: A potentially dangerous Request.Path value was detected from the client (&amp;). Request URL: <a href="http://www.domain.com/&amp;&amp;a.display!==" rel="nofollow">http://www.domain.com/&amp;&amp;a.display!==</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/Sys.ArgumentTypeException" rel="nofollow">http://www.domain.com/Sys.ArgumentTypeException</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/;a.style.display=" rel="nofollow">http://www.domain.com/;a.style.display=</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/).join" rel="nofollow">http://www.domain.com/).join</a>(</p></li> <li><p>Exception message: A potentially dangerous Request.Path value was detected from the client (&amp;). Request URL: <a href="http://www.domain.com/&amp;&amp;(b.position===" rel="nofollow">http://www.domain.com/&amp;&amp;(b.position===</a></p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: class=true;RegExp._typeName=">http://www.domain.com/;Number._<em>class=true;RegExp.</em>_typeName=</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/);a.append(b.getTime());a.append" rel="nofollow">http://www.domain.com/);a.append(b.getTime());a.append</a>(</p></li> <li><p>Exception message: The IControllerFactory 'Ninject.Web.Mvc.NinjectControllerFactory' did not return a controller for the name Request URL: <a href="http://www.domain.com/hcp/html/mTag.js" rel="nofollow">http://www.domain.com/hcp/html/mTag.js</a></p></li> </ol>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. This table or related slice is empty.
    1. USMichael Grassman
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
      1. This table or related slice is empty.
      1. VTUpMod
    1. COIMHO, this does not look like attacks, but more like a bug somewhere. Each Exception seems to correspond with a line portion of some C# stack text that was appended to "http://www.domain.com/". Attacks don't look like that.
      singulars
      1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
      1. USSimon Mourier
    2. CO@Simon Mourier: checking against the uri strings in the server request log should clear that up. If there's nothing matching, this means this 'ninject' product is defective or not properly configured.
      singulars
      1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
      1. USbob-the-destroyer
    3. COThese were all sent with in 30 seconds of each other from the same ip address. That is why I was assuming this was an attempt to get something. We have very little traffic right now and at 1am I'm the only traffic on the site.
      singulars
      1. PORecently recieved about 15 attacks and wanted an expert to explain what each was trying to do
      1. USMichael Grassman
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload