4 ms·

Db_password filetype:env -localhost

• filosofikode 8y ago
  just got from a group on telegram
• flukus 8y ago
  A lot of week passwords there, even some defaults. Is there a reason to not have webservers where you have to explicitly enable filetypes?
  • filosofikode 8y ago
    basically all dots files are ignored via `.gitignore`, specially .env file. I think they use ftp to make their sites live.
  • bigiain 8y ago
    And quite a few mysql and redis instances that look to be publicly available (or at least which are not 127.0.0.1 - I didn't actually try connecting to any...) Also some almost certainly valid/working email account credentials as outbound mail server configurations...