Joe Testa hellbent Information Leak...

- AV AC AU C I A
发布: 2002-01-18
修订: 2025-04-13

hellbent is a java web server maintained by Joe Testa. hellbent contains a file called 'hellbent.prefs', this file contains the web root, paths to the access and error logs, and IP access lists. If a user creates a file in the web root named after one of the preferences within the 'hellbent.prefs' file, and submits a GET request, the server will return the entry for the corresponding preference. For example, if a user names a file index.webroot, and submits a GET request for that file, hellbent will return the corresponding entry within 'hellbent.prefs' for webroot.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息