RE: Website search engine is a hacking tool..
From: Vinicius Moreira Mello (vinicius_at_lineone.net)
Date: 07/30/04
- Previous message: Max Enders: "Re: Testing F5 3DNS"
- In reply to: Amal Mohammad Al Hajeri: "RE: Website search engine is a hacking tool.."
- Next in thread: Mark Curphey: "RE: Website search engine is a hacking tool.."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 Jul 2004 23:15:44 -0300 To: pen-test@securityfocus.com
Hi,
>-- Original Message --
>Subject: RE: Website search engine is a hacking tool..
>From: Amal Mohammad Al Hajeri <amal@nis.etisalat.ae>
>
> and how can we mitigate the risk of using such techniques? did anyone
succeed in using
>the local search engine as a proxy to attack other targets?
Try disabling indexing (apache: Option -Indexes) for as much directories
as possible and not using/protecting critical files under the webserver
(ch)root diretory.
Regards,
vmm.
__________________________________________________________________
Get Tiscali Broadband From £15:99
http://www.tiscali.co.uk/products/broadband
- Previous message: Max Enders: "Re: Testing F5 3DNS"
- In reply to: Amal Mohammad Al Hajeri: "RE: Website search engine is a hacking tool.."
- Next in thread: Mark Curphey: "RE: Website search engine is a hacking tool.."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|