I just had 'some' nice person trying to do something with my site and I was wondering if someone could tell me what they were trying to do.
They tried every page on my site and added a ' to each page name, for example: index'.aspx . This logged an error: The file '/index'.aspx' does not exist.
Then they tried adding urls to my querystring, for example: http://<domainname>.com/ImageDetails.aspx?ImageID=http://sans-packing.ru/img/jipeqap/ehudute/. This logged an error: Input string was not in a correct format.
Can someone tell me what they were trying to do. Also they managed to find links to pages that are only available to admin users (a certain level set in db). How did they find these pages?
I'm still trying to figure what they did, if they succeeded or not.
...
Go to the complete details ...