Introducing Snallygaster - a Tool to Scan for Secrets on Web Servers

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

A few days ago I figured out that several blogs operated by T-Mobile Austria had a Git repository exposed which included their wordpress configuration file . Due to the fact that a phpMyAdmin installation was also accessible this would have allowed me to change or delete their database and subsequently take over their blogs. Git Repositories, Private Keys, Core Dumps Last year I discovered that…

Read on blog.hboeck.de ↗