I found a vulnerability in a site that can allow the download of any file of the server. I tested it by succesfully downloading
I have no access to source code or file system structures. All I know is it runs Win 2003 Server Ent. in drive
C:, Oracle 10.1.2 AS_1 in drive
I would like to know what files can be downloaded in order to compromise it? (I dont have the intention of doing aything wrong in this server, just want to know how vulnerable it is.)
I suspect that I can use this vulnerability to escalate to shell access, or at least write access of some kind. Are there files containing credentials that may be used for a remote login, for example? What files should I try downloading next?
(Conversely, these are the files that the administrator must take care to protect. If you were the system administrator, which files' permissions would you double check before declaring the server ready to go live?)