Penetration Testing mailing list archives

downloading php scripts?


From: "Macbeth, Soren" <smacbeth () oracorp com>
Date: Sun, 18 Nov 2001 15:53:06 -0500

Hello all,

I am performing a pen test on a Zues server with php which has improper
access controls on some of the directories allowing me to view all the files
in them. Is there a way that I can trick the server into letting me download
the source from these directories?

TIA,

soren

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: