3 ms·
Even if it's remotely possible to hack Nginx... what's the motivation to hack a static site? There's no DB with juicy data and no compute to abuse for mining c
by pier25 2y ago
Even if it's remotely possible to hack Nginx... what's the motivation to hack a static site?
There's no DB with juicy data and no compute to abuse for mining crypto or running DDOS attacks.
- arccy 2y agotrick users into clicking malicious links, host ads, seo link farm, host other questionable content, or some people just like to deface websites
- mfkp 2y agoUsually SEO spam link insertion and generic Viagra spam redirects...
- prepend 2y agoSimilar motivation as hacking a Wordpress site, putting seo spam out there. There’s less payoff, but people still do it.
- pier25 2y agoyeah but the difficulty in hacking Nginx vs Wordpress must be orders of magnitude more difficult though
- dowager_dan99 2y agoyou can change the payload sent to users, static or not. If you serve javascript you're serving dynamic, runtime dependency injecting code.