3 ms·
/etc/shadow is a file containing system account info that should never be accessible to the public on a properly-configured webserver. It's possible the request
by yamtaddle 4y ago
/etc/shadow is a file containing system account info that should never be accessible to the public on a properly-configured webserver. It's possible the request was probing for some very-specific combo of misconfigurations that might permit reading sensitive files, without going so far as to request the sensitive file.
- dmux 4y agoRight, I understand that. What I probably should have made more clear was whether it was trying to get to /etc/shadow, or another .../etc/shadow.php file located somewhere within the web-server's file directory.