Re: [Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Joshua Siler
activesupport (4.0.13.rc1) lib/active_support/dependencies.rb:464:in `load_missing_constant' activesupport (4.0.13.rc1) lib/active_support/dependencies.rb:184:in `const_missing' activesupport (4.0.13.rc1) lib/active_support/dependencies.rb:495:in `load_missing_constant' activesupport (4.0.13.r

Re: [Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Colin Law
On 6 January 2015 at 17:04, Joshua Siler wrote: > To clarify, > > https://gadgetco.hiringthing.com/admin/jobs/k(b.onLoad)&&n(a,'load',h.onLoad),null==h||'none' > > Crashes with the exception "LoadError: Unable to autoload constant Jobs", > while > > https://gadgetco.hiringthing.com/admin/jobs/h.de

[Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Joshua Siler
To clarify, https://gadgetco.hiringthing.com/admin/jobs/k(b.onLoad)&&n(a,'load ',h.onLoad),null==h||'none' Crashes with the exception "LoadError: Unable to autoload constant Jobs", while https://gadgetco.hiringthing.com/admin/jobs/h.delayType)c(h,b),h.before=b,e= Gives the "RuntimeError: Circ

[Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Joshua Siler
It's one of two exceptions. Either "RuntimeError: Circular dependency detected while autoloading constant Jobs" or "LoadError: Unable to autoload constant Jobs". The trace includes no application files (only framework files), and we have no "Jobs" object defined in the system. We do have a Job

[Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Frederick Cheung
On Tuesday, January 6, 2015 4:43:03 PM UTC, Joshua Siler wrote: > > We do get a fair amount of requests to random HTTP verbs and file types, > but the system usually handles that just fine (throwing an unknown request > exception would be desired behavior.) What concerns me about this is that

[Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread Joshua Siler
We do get a fair amount of requests to random HTTP verbs and file types, but the system usually handles that just fine (throwing an unknown request exception would be desired behavior.) What concerns me about this is that I'm seeing unexpected behavior, based on the addition of a period in the

[Rails] Re: Seeing Novel Rails Hack Attempts

2015-01-06 Thread cntrytwist
Josh, Do you see any quit request types along with this? I see quit requests and it makes the web application complain that it doesn't know what kind of request that is. Kent On Monday, January 5, 2015 6:28:56 PM UTC-7, Joshua Siler wrote: > > Hi, > > We're getting some weird exceptions that loo