Logo
Bezbedan Balkan / Bezbednost privatnih resursa / Neadekvatno zaštićeni resursi /

Mailing lista dostupna na sitzam[.]org[.]rs


Threaded Mode
Mailing lista dostupna na sitzam[.]org[.]rs
majksec
Junior Member
**
Posts: 5
Threads: 2
Joined: Nov 2022
Reputation: 2
#1

11-08-2022, 12:49 AM
Google dorking-om dodjoh na listu mailova (korporativnih verovatno) koja je svima dostupna. Verujem da je u pitanju losa konfiguracija permisija ili jednostavno rute nisu zasticene?

   
(This post was last modified: 11-08-2022, 12:52 AM by majksec.)
Find
Reply
y0d4
/dev/null
*******
Posts: 334
Threads: 86
Joined: Sep 2022
Reputation: 111
#2

11-08-2022, 01:16 AM
hit...
good find! Wink
Be critical thinker!
Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#3

11-08-2022, 01:04 PM
Uključen je directory listing i linkovane su stranice, probaj dork "Index Of".
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Website Find
Reply
majksec
Junior Member
**
Posts: 5
Threads: 2
Joined: Nov 2022
Reputation: 2
#4

11-08-2022, 01:19 PM
(11-08-2022, 01:04 PM)1van Wrote:  Uključen je directory listing i linkovane su stranice, probaj dork "Index Of".

Nista interesantno, sve "junk" fajlovi
Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#5

11-08-2022, 01:22 PM
Samim tim što je uključen directory listing ovo možemo smatrati neadekvatno zaštićenim resursom. Preporuka je da se isključi ova opcija i da se e-mail adrese drže makar u bazi koja nije lako dostupna za neautentifikovane korisnike.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 11-08-2022, 01:22 PM by 1van. Edit Reason: Typo. )
Website Find
Reply
« Next Oldest | Next Newest »


Forum Jump:


Users browsing this thread: 2 Guest(s)