About Ahmed_340

Ahmed_340 · ‎06-05-2024

the following code 1' OR '1'='1'# these are the malicious code to get admin data and password. i want to find the anomaly that it causes the log through Splunk search sample attack

Ahmed_340 · ‎06-05-2024

i have installed a vulnerable web application in my win 10 OS through xampp. now i have setup my splunk enterprise to test the effect of various attack on the target DVWA web application . or 1=1; -- this is a Sql injection attack

Ahmed_340 · ‎06-05-2024

hello, i am a newbie . where are i can get the demo data to practice different attack detection in splunk enterprise?

Ahmed_340 · ‎06-05-2024

here is the fresh code index="dvwa_logs" host="DESKTOP-OKV6K44" sourcetype="access_combined" (" ' or 1=1; -- " OR " admin' OR '1'='1 ") | stats count by source_ip, uri, _time still not working i have injected ' or 1=1; -- this in the input field

Ahmed_340 · ‎06-05-2024

i am a newbie please help me to correct my code . tried to correct that with chatgpt. it said the code is ok

Ahmed_340 · ‎06-05-2024

i have installed DVWA over a xampp . done some cross site scripting now i want to detect that malicious activity in my splunk enterprise iput the following command index="dvwa_logs" host="DESKTOP-OKV6K44" sourcetype="access_combined" ("' or 1=1; --" OR "admin' OR '1'='1") | stats count by source_ip, uri, _time but not getting ant result

Ahmed_340 · ‎06-04-2024

hello i have installed DVWA in my xamp server . practiced some Sql attack on DVWA . after that i typed the following in Splunk search bar but its showing any result . index=dvwa_logs (error OR "SQL Injection" OR "SQL Error" OR "SQL syntax") OR (sourcetype=access_combined status=200 AND (search_field="*' OR 1=1 --" OR search_field="admin' OR '1'='1")) | stats count by source_ip, search_field, host

Posts	7
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎06-04-2024

Online Status	Offline
Date Last Visited	‎06-06-2024 06:34 AM

where are i can get the demo data to practice diff...

splunk

Re: splunk

Re: splunk

where are i can get the demo data to practice diff...

Re: splunk

Re: splunk

Re: splunk

splunk

Are you a member of the Splunk Community?