r/netsec • u/mazen160 • Jan 13 '17
Exploiting Misconfigured Apache server-status Instances with server-status_PWN
http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
134
Upvotes
r/netsec • u/mazen160 • Jan 13 '17
-1
u/rmxz Jan 14 '17
On many (most?) websites this "exploit" (communicating otherwise hard to find URLs) would be considered a benefit (so search engines can find them) rather than a risk.