3 ms·

This site has an exposed Git directory, so you can clone the whole thing. Funnily enough, it appears to be actually talking to a MySQL database. http://sharesol

by seawlf 9y ago

This site has an exposed Git directory, so you can clone the whole thing. Funnily enough, it appears to be actually talking to a MySQL database. http://sharesolo.com/get_notes.php http://sharesolo.com/get_notes.php Also, all of the credentials are there. I won't post them, but lordy, please close this before your database is wiped.

wtsui 9y ago
Careless error. Removed, thank you.
tomcooks 9y ago
Bravo for pointing that out! Care to explain how you discovered this? Making such security mistakes is what my nightmares are made of
- aw3c2 9y ago
  Probably tried to access http://sharesolo.com/.git/ http://sharesolo.com/.git/ for the repo and looked at the network traffic to see the get_notes.php.
swyx 9y ago
good on you for pointing out the security hole. i'm still a newb when it comes to it.