Date: 6 months ago   Category: Hi-Tech

About 390 thousand websites left open catalogs.git with a code


Czech researcher of safety Vladimir Smitka (Vladim&237; r Smitka) has carried out scanning about 320 million domains and has revealed that on 390 thousand websites catalogs of ".git" which on oversight have exposed in public space without access restriction are available to loading. In similar catalogs it is possible to find the classified information in certain cases menacing to safety. For example, in the catalog.git source texts of all server handlers of the website (attacking can use from for search of vulnerabilities), and in certain cases passwords and keys of access to DBMS, API and cloud services can be left.

Scanning of all domains in network has taken about 4 weeks then the researcher has tried to warn owners of the websites on which return of the catalog "is recorded. git", having organized mailing by email. E-mail addresses have been taken from file/.git/logs/HEAD. From 390 thousand websites it was succeeded to define email for 290 thousand from which 90 thousand email were unique. After sending prevention of 18 thousand addresses were not acting any more. In response to mailing nearly 2000 letters with thanks, 30 messages about false operation, two letters have been received from spammers and one threat with intention to complain in police.

Studying of contents of the catalog of" .git" has shown that 96% (186205 of selection in 194000) the websites contain a code in the PHP language and on 1% for Node.js (2394), Java (1742), Ruby (1199) and Python (1499). The code on Perl has been found in 504 cases. The 42nd thousand websites work under control of Ubuntu, 12906 - Debian, 9350 - CentOS, 3204 - Windows Server, 378 - RHEL, 216 - FreeBSD, 170 - Fedora, 152 - Gentoo, 50 - SUSE. Among control systems of content WordPress - 41139 websites, Drupal - 2256, Joomla - 1615, Typo3 - 1258, Bitrix - 330 is in the lead. On materials: www.opennet.ru

URL:




Today

just now

The fan of the famous cinematographer plans to create the version of the movie "Turncoats", having cut out a scene with a rat at the end of a picture. the Movie by Martin Scorsese came out in 2006....

just now

Sruza three Ukrainian airlines submitted applications to State aviaservice of Ukraine for receiving the rights for flights along a route Kiev-Paris. Flying on this MAU line requested increase in fre...

just now

Environmental issues are brought up in modern society quite often. The garbage, waste, unauthorized dumps and many other things cause concern for human health. In the Republic of Mordovia active work...

just now

Two servicemen suffered at explosion of an unknown subject on the ground in Kiev region. The press service 72 separate mechanized crews of the Armed Forces of Ukraine in Facebook reports about it. I...

just now

Fran Sol's goal brings to Kiev residents a victory over the Pedru team of Martinsh On NSK Olympic so far there takes place the return match 1/16 finals of the Europa League the Kiev Dynamo accepts t...

just now

Masahiro Ito Masahiro is the Japanese artist who developed design of dreadful monsters for the first three Silent Hill. During creation and he held the art director's position. On Twitter shared the e...

just now

In a mishlenovsky institution it ordered a dish with morels. morels, poisoning, mushrooms of In Spain the woman died in several hours after visit of expensive elite restaurant noted by Michelin star. The morels dish became a cause of death. As reports Daily Mail, Maria Jesus Fernández Calvo celebrated with family at RiFF restaurant in Valenci...

just now

The ambassador of Ukraine in Canada Andrey Shevchenko gave the direct written instruction to conclude under the Russian laws the bargain on sale of the ground belonging to it in the Crimea. It was sai...