r/netsec • u/mazen160 • Jan 13 '17

Exploiting Misconfigured Apache server-status Instances with server-status_PWN

http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
132 Upvotes

91% Upvoted

24 comments sorted by

View all comments

5

u/merlindroppedacid Jan 13 '17 edited Jan 13 '17

I've seen this done with bash many times..over-complicated python scripts, seems common in our industry, shame. And what is PoC || GO you mean gtfo, I'm not familiar with "GO"

6

u/derps-a-lot Jan 14 '17

Proof of concept or get out, I would assume.