News for hackers. Stuff that matters.

A comment on Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets. Parent comment

Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by nolok on Sunday March 10, 2019 @06:13AM (#19351276)
Unsecured directory listing of a common php cms that shows uploads, and one of them them is a full DB dump made with phpmyadmin. The only thing missing is execution rights in that directory.

This is either an insider joke or a jump back to 2004.

[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by dud3333 on Sunday March 10, 2019 @06:26AM (#19351318)
this is "wordpress-normal" - the funny/sad part is its the wordpress blog of a security company investigating a huge breach...
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by groestl on Sunday March 10, 2019 @10:26AM (#19352108)
Unless this is actually not a security company investigating a huge breach.
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by pbhjpbhj on Sunday March 10, 2019 @10:11AM (#19352056)
I've never seen directory listing turned on as a normal part of WP install.
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by crankylinuxuser on Sunday March 10, 2019 @08:19AM (#19351650)
Well, its better to get some wordpress hacked, than it is to have a server onprem get pwned and used as a inadvertent bastion to your internal network.
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by flattone on Sunday March 10, 2019 @09:32AM (#19351909)
phpmyadmin is apprx. the only thing i remember about making a website.
[ Parent | on HN ]