full-disclosure - Re: In ur server-status

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 23 Jul 2007 13:21:16 +0200
From: Alessandro Fiorenzi <a.fiorenzi@...ogroup.it>
To: Todd Troxell <ttroxell@...ian.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: In ur server-status

Well I find is more serious to find /server-info availabable on one of
thats,
you could rebuild some important information on the apache
configuration, modules, directives, etc..

Alessandro Fiorenzi

On Sat, 2007-07-21 at 22:53 -0500, Todd Troxell wrote:

> Noticing lots of admins tend to forget about /server-status, I typed at random:
> 
> http://www.cnn.com/server-status
> http://www.webshots.com/server-status
> http://www.download.com/server-status
> http://slashdot.org/server-status
> 
> I am sure there are ten billion others.  In some cases this is worse than
> someone grabbing your access log. 
> 

------------------------------------------------------------------------------------
INFOGROUP S.P.A                                  http://www.infogroup.it
Gruppo Banca CR Firenze
http://www.carifirenze.it
------------------------------------------------------------------------------------

Dott. Fiorenzi Alessandro  
Security Project & Management

Consulente Tecnico Trib. Firenze - Sicurezza Informatica -
Albo consulenti ed esperti CCIAA Firenze
Socio CLUSIT, ALSI  
Member of IEEE Computer Society

Tel    : +390554365742                
CE     : +393356414477                 
@Email : a.fiorenzi@...ogroup.it 
@Email : Security.Management@...ogroup.it
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
------------------------------------------------------------------------------------

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/