Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Web Application Attack - Insecure Indexing

Posted by timothy on from the trawling-for-patterns dept.

An anonymous reader writes "Take a look at 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' by Amit Klein. This is a new article about 'insecure indexing.' It's a good read -- shows you how to find 'invisible files' on a web server and moreover, how to see contents of files you'd usually get a 401/403 response for, using a locally installed search engine that indexes files (not URLs)."

4 of 120 comments (clear)

  1. Re:this is'nt new by Refrozen · · Score: 1, Offtopic

    Yeah, you're apostraphy goes one character to the right.

  2. Re:this is'nt new by Refrozen · · Score: 0, Offtopic

    And that "you're" was supposed to be your.... :P

  3. Re:this is'nt new by ikkonoishi · · Score: 0, Offtopic

    You really should have put quotation marks around the "your".

  4. Re:this is'nt new by jacksonj04 · · Score: 0, Offtopic

    I think you should have... what... but...

    Dammit! A perfect Grammar Nazi!

    --
    How many people can read hex if only you and dead people can read hex?