Apache in competitive intelligence. Great explanation from Lukamu

[Ющук Евгений Леонидович]

Source [DLMURL] https://yushchuk.livejournal.com/240739.html [/ DLMURL]

I bring the material "as is". Explained, in my opinion, excellent. Author: lukamud, Source: [DLMURL] https://lukamud.livejournal.com/23151.html [/ DLMURL]
Next is a quote.

Features of the national hack. Draft records of the president’s visit to the Far Eastern Federal District in the public domain?

Recently, yushchuk, dobryi_leshii, and others are actively exploiting “one of the features” of the Apache web server to find the materials necessary for work. But it is stated in such a form incomprehensible to the average person that it made me able to write a separate post.


Forgive me colleagues, I will talk about it at the philistine level. And so, when a user accesses using a browser (the program with which they look at Internet pages) to a certain URL (this is what you type in the browser window like https://it2b.ru/company/hreshebnik/blog/ ... m = facebook com) a web or HTTP server accepts a client request, processes it and transfers the requested data. This data is processed by the browser and visualized on the screen.

The first HTTP server was invented in 1990 at the European Organization for Nuclear Research (CERN). Currently, I know about ten types of HTTP servers, the most common being Apache (Apache HTTP Server). All of them work in typical cases in approximately the same way. Therefore, in the future, we will consider the example of Apache. If you put a file with the name index.html containing some HTML code in the directory (directory, folder) that is defined as the root for the server, then the user who accesses the resource will see the corresponding page. But what happens if you don’t put a single file in this directory, or put one or more files that have names other than index.html? In this case, the server’s response depends on its settings. You can configure the server so that it will not show the contents of the directory, or it is possible so that the HTTP server automatically indexes the contents of the directory and forms the corresponding page. An approximate view of this page can be seen at the beginning of the post.

Please note that on this automatically generated page are the phrase “Index of”, the name of the HTTP server is “Apache”, the file names and the date they were modified. This fact makes it easy to find such pages using search engines.

I was interested in the question, are there many similar pages on the official state websites of the Russian Federation? To do this, I asked Google:

2010 "index + of" apache site: gov.ru

In common human language, this means that

“Dear Mr. Google, could you tell me if there are automatically created using Apache, containing the latest, 2010 information, index pages, on the hosts in the zone (on the sites whose names end with) gov.ru, used to host official sites in the Russian Federation? ”


Google promptly replied to me that there were approximately 722 of these pages. On the first page of the issue appeared the sites of the "Administration of Tambov" https://city.tambov.gov.ru/ and the site https://it2b.ru/company/hreshebnik/blog/ ... m = facebook at https://dfo.gov.ru/ the official website of the plenipotentiary of the President of the Russian Federation in the Far Eastern Federal District). In the directory / press / 020710Preziden there were files with the names:

Darkin_.zip, Darkin_ZVUK.mp3, Medvedev_.zip, Medvedev_ZVUK.mp3, Filming1.zip.


Judging by the names, sizes and dates, the files contain the results of video filming and sound recordings made during the visit of Russian President D. Medvedev to the Far Eastern Federal District. I had no desire to familiarize myself with these files, but their availability on the Internet, freely available, surprised me somewhat. It seems to me that these files are not intended for public use. This is indicated, for example, by their placement in the form of archives. The need for the correct installation of automatic indexing directories has been written for more than a dozen years. I could admit that the wrong settings might be on teen sites, but on government sites? I was very surprised.

Purely out of interest, I decided to find out how often RuNet users are interested in such index pages? To do this, I turned to the [DLMURL] service https://wordstat.yandex.ru/ [/ DLMURL], from where I found out that users search for the phrase “index + of” 7555 times a month.

It is very incomprehensible that this request is made only by users from two countries - Russia and Ukraine. The features of the national "hack" are clearly manifested.

The end of the quote.

********************************....

I think lukamud is useful to many categories of people at once.

1. Competitive intelligence professionals — they will be able to better understand the tools they use.

2. Those who are responsible for the information security of sites in government agencies (not everyone is so scrupulous that they voluntarily refuse to watch files, as the author of the post did).

3. Heads of enterprises who can verify the work of their IT-specialists.

Yes, both state and official secrets will be preserved. And such negative phenomena as signs of violation of the Marker newspaper headed by editor Alexander Malyutin and the official secret of the President of the Russian Federation, I hope, will be reduced. If specialists read this material and take measures to restore order on the servers.

And incidents that will nevertheless occur due to the legal lawlessness of the nihilism of individual journalists will be easier to investigate. After all, the journalist of that very notorious Marker, who cynically declared publicly that she had not been given a decree, still worked in the newspaper. “I don’t care what is written in the Criminal Code,” the journalist of the newspaper Marker publicly stated. And she added: "I myself determine what I have the right to and what not."

And what can stick to the hands of such a person tomorrow is impossible to predict.

 

[Бедеров Игорь Сергеевич]

Just super, thanks !!!

 

[Матушкин Андрей Николаевич]

Thank!!!

 

[Плотников Юрий Михайлович]

Thanks, interesting!

 

[Роберт]

Apache crap for you ?! : D oh good.

 

[Роберт]

Apache crap for you ?! : D oh good.

Further
05/10/2007, 18.17.22
index of - alternative file search method

Or how to find open directories for example with music using https://google.com

So what is an open directory? Everything is very simple. On many web servers all over the Internet, the settings allow viewing the web directory with all its contents. For example, such a trick will not work on our website, but on many others it will work. That is, in other words, you will not see the page of the site, but the contents of the directory, where there may be a lot of tasty things that you do not even suspect.

And what prevents us from finding such directories using a search engine? Yes, actually it costs nothing. One has only to carefully study the query language that every search engine has. Let's try to do it in google.


So, now we will formulate a request in Google. Let strange characters not scare you, but this is all nothing more than what we write in the Google search box and click search.

To limit the search to html pages only, write
-inurl: htm -inurl: html

And we will search only on pages with the title tag containing the phrase "index of", since most web servers return the standard page of the open directory and the title there is the same:

intitle: "index of"

Add a line to the request that is also standardly contained on this page:
"Last modified"

Specify the file type - mp3 and some keyword such as "chaif"

The result was such a search line:

-inurl: htm -inurl: html intitle: "index of" "Last modified" mp3 chaif

Let's see what wise Google will answer such a request.
Several songs of Chaif can be downloaded from the first link. The main thing to remember is that we are actually looking for the names of files, therefore Google is not responsible for the search results. Having studied the languages of search queries, you can search much more effectively on any search engine. Just consider that everyone has their own language. : D

 

[Турабян Владимир]

THANK!