4 ms·
Also, attackers are rarely going to try to guess your URLs - they’re going to find them via Google or Shodan, or, if you’re a good rest citizen, via “/<yourapp>
by efitz 4y ago
Also, attackers are rarely going to try to guess your URLs - they’re going to find them via Google or Shodan, or, if you’re a good rest citizen, via “/<yourapp>/“
- bryanrasmussen 4y ago>Also, attackers are rarely going to try to guess your URLs - because then the attack becomes DOS as they cycle through dictionaries of words?
- raverbashing 4y agoAny website gets probed for wp-admin.php etc, even if you don't use WP
- BiteCode_dev 4y agoIn fact, if someone is probing for wp-admin, you should insta ban them, no matter the site.
- marginalia_nu 4y agoI get quite a lot of guesses in my logs, probing in /solr/ and so on (fairly pointlessly, I might add, as I run bespoke software).