Timeline for Tomcat application arbitrary file read exploitation
Current License: CC BY-SA 4.0
21 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 12, 2020 at 17:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 15, 2020 at 16:04 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 16, 2020 at 15:03 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 17, 2019 at 14:11 | answer | added | MLT | timeline score: 2 | |
| Dec 17, 2019 at 10:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 19, 2019 at 9:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 21, 2019 at 9:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 22, 2018 at 9:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 22, 2018 at 8:10 | answer | added | mike | timeline score: 0 | |
| Nov 21, 2018 at 14:38 | comment | added | void_in | Can you try to read conf/server.xml file? It has a lot of configuration info including DB credentials. | |
| S Nov 21, 2018 at 10:55 | history | suggested | mike | CC BY-SA 4.0 |
Fixed typos, included OS
|
| Nov 21, 2018 at 10:27 | review | Suggested edits | |||
| S Nov 21, 2018 at 10:55 | |||||
| Nov 21, 2018 at 10:03 | comment | added | puni aze | @mike We are doing blackbox test, OS should be CentOS and I want to know what I can do in this situations. I can read files, which files I should look for? | |
| Nov 20, 2018 at 16:45 | comment | added | mike | @puniaze I don't think community can help you with path traversal attack without mention OS and what exactly are you looking for. You should update your question, as seems impossible to help you. | |
| Nov 20, 2018 at 15:18 | comment | added | puni aze | @mike thank you for your answer. This list is useful for directory bruteforcing but it is too short and nothing to do with path traversal. I need something that could help me collecting xml files and other sensitive datas. If you know efficient way of doing, please share with us. | |
| Nov 20, 2018 at 14:45 | comment | added | mike | Hi, did you check this list? Tell me if it's the suitable one, to provide a full answer for future reference. | |
| Nov 20, 2018 at 0:01 | comment | added | puni aze | @JohnDeters I edited my question. I hope this time it became clearer. :)) | |
| Nov 19, 2018 at 23:59 | history | edited | puni aze | CC BY-SA 4.0 |
added 100 characters in body
|
| Nov 19, 2018 at 23:35 | comment | added | John Deters | Hi, welcome to security.stackexchange.com! Can you please edit your question so that it's immediately obvious what you are asking for help with? As it's written it's unclear what you need. | |
| Nov 19, 2018 at 23:30 | review | First posts | |||
| Nov 20, 2018 at 1:35 | |||||
| Nov 19, 2018 at 23:29 | history | asked | puni aze | CC BY-SA 4.0 |