google dorks
HTTP Source Streaming.
Submitted by secgeeks on Thu, 08/05/2008 - 13:45.18
vote
Okay, this isn't new but I never got to the point to actually talk about this here. While HTTP source streaming is a very basic concept, I noticed that not everyone noticed it's principle and that some programmers still don't understand security. In certain cases programmers need to stream a file to the screen. The problem arises when programmers are streaming hardcoded files to the screen instead of stored file pointers. The URI is not designed to correlate files, it's meant for the basic scheme and it's optional query string parameters. read more »





