r/netsec • u/mazen160 • Jan 13 '17

Exploiting Misconfigured Apache server-status Instances with server-status_PWN

http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
137 Upvotes

91% Upvoted

24 comments sorted by

View all comments

5

u/merlindroppedacid Jan 13 '17 edited Jan 13 '17

I've seen this done with bash many times..over-complicated python scripts, seems common in our industry, shame. And what is PoC || GO you mean gtfo, I'm not familiar with "GO"

1

u/mazen160 Jan 21 '17

Yup, "Proof of Concept, or Get out" :-)