4 ms·
The robots.txt file of Oregon.gov is somewhat suspicious. There seem to be lots of hidden executable files as well as pages with GET queries. Because of the am
by rshnotsecure 6y ago
The robots.txt file of Oregon.gov is somewhat suspicious. There seem to be lots of hidden executable files as well as pages with GET queries.
Because of the amount, I would guess some of the executable files lead to web shells. I am less sure of, but still somewhat confident, that the open GET queries might be pages where someone has discovered a SQL injection flaw.
They are likely trying to prevent these pages from appearing on Google where a regular user might notice. Will try to look shortly on desktop and update further.
[1] - https://www.oregon.gov/robots.txt https://www.oregon.gov/robots.txt
- TheDong 6y agoHonestly, it seems far more likely to me that some "SEO Expert" came through at some point and said they should optimize their searchability by making sure search-engines didn't index certain pages. Seems far more likely than that there's anything actually bad going on here. Also, jumping from "Huh, lots of robots.txt entries" to "SQL injection flaw" doesn't make sense to me. I don't see how those things are related.