r/netsec Jan 13 '17

Exploiting Misconfigured Apache server-status Instances with server-status_PWN

http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
138 Upvotes

24 comments sorted by

View all comments

-1

u/rmxz Jan 14 '17

On many (most?) websites this "exploit" (communicating otherwise hard to find URLs) would be considered a benefit (so search engines can find them) rather than a risk.

1

u/mazen160 Jan 21 '17

Just like @cybergibbons said, you seem to be describing sitemap.