Attacks to Database HELP!!!!

New Member Joined: Dec 22, 2004 Posts: 2

Hi,
This is an urgent event and we need immediate solution. There is a program
called as D4 and it sends a huge data to the sql database and it slows down
the website in the first 2-3 seconds and then in a few seconds it shuts down
the website until s/he stops using the program. We made a huge research over
the internet, but we couldn't find any solutions for this. It can shut down
any website, that's having a sql based database.
It is also including your website, which means your forum and website also can be shut down with this program in a few seconds.
I hope you can help us with
this problem. Thank you for your attention and time.

if the site admins want to get the program, they can contact us. However, they should be aware that this is a dangerous program so it shoudn't be distrubuted.

Posted: Wed Dec 22, 2004 3:44 pm

Uhg! I see webhosts every where scrambling to set their MAX Connects very low. Creating extra db users and adding some random code to the config.php to switch users might slow it up some but on the other hand it might make it crash faster could be very interesting.

There is an example here [ Only registered users can see links on this board! Get registered or login! ]
You could even create a blank entry that would just give the Nuke mysql failure page randomly users might find it annoying but its a twist on a tactic lycos used at one time when they were really over crowded.

Posted: Wed Dec 22, 2004 3:54 pm

Could even use the number of times a host hit the mysql error page over a specified time add the ip to your Nuke Sentinel ban list or even the nuke ban list for that matter. If they hit the dummy page more then twice in a minute its pretty good bet its not a normal user.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

It's called FucKuM SQL FucKeM.exe

Posted: Thu Dec 23, 2004 3:40 pm

its called d4, has nobody a solution:(

Posted: Thu Dec 23, 2004 3:46 pm

It sounds like it's probably the same program. Before it was released and they were testing it, that's what it was called. No solution as of yet.