3 ms·
One of the more amusing patterns I spotted in the URLs is where an alarming amount of the filesystem appears to be exposed, e.g.: www.dulceswilly.com/mysql/BHP
by gargravarr 9y ago
One of the more amusing patterns I spotted in the URLs is where an alarming amount of the filesystem appears to be exposed, e.g.:
www.dulceswilly.com/mysql/BHP_sym/root/usr/local/etc/apache22/server.key
If I was on a non-company IP, I'd be tempted to poke around and see what else is visible...
- edward 9y agomysql root password: http://www.dulceswilly.com/mysql/BHP_sym/root/root/.my.cnf http://www.dulceswilly.com/mysql/BHP_sym/root/root/.my.cnf
- ndury 9y agoToo late, "professional" hackers from indonesia already done the job. Front page reads: PELITABANGSA .CA [ INDONESIA CYBER ATTACK AND MALWARE ANALYST ]
- ryanlol 9y agoThese are already hacked systems where someone has been trying to perform a "symlink attack" to access other users files with the httpds permissions.