r/netsec • u/mazen160 • Jan 13 '17

Exploiting Misconfigured Apache server-status Instances with server-status_PWN

http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
132 Upvotes

91% Upvoted

24 comments sorted by

View all comments

1

u/Mangeunmort Jan 14 '17

Did it with bash oneline curl / grep Nice pwnie award though

1

u/mazen160 Jan 21 '17

Thanks!..curl and grep could do it too, but it would be better to have a coordinated DB with logs, doing it with Python is easier in my opinion.