Posts Tagged ‘Apache Configuration Directive’
Potential leak of data: Apache Configuration Directive
Detected 1 occurrence(s) of ‘allow\s*from\s*[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+’:
ustomLog ${APACHE_LOG_DIR}/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
</VirtualHost>
Potential leak of data: Apache Configuration Directive
Detected 1 occurrence(s) of ‘authuserfile\s*\/’:
ient/locale/main/main.csv - 1 inputs
/tdp4/facebook/client/locale/main/main.csv - 1 inputs
*************************************************************************************************************************
say("How about some .htaccess?");
AuthUserFile /etc/apache2/.htpasswd
AuthName "Please Log In"
AuthType Basic
require valid-user
*************************************************************************************************************************
say("Oh, Cross-Domain Vulnerabilities?");
Potential leak of data: Apache Configuration Directive
Detected 1 occurrence(s) of ‘allow\s*from\s*[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+’:
CustomLog ${APACHE_LOG_DIR}/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
</VirtualHost>
Potential leak of data: Apache Configuration Directive
Detected 1 occurrence(s) of ‘authuserfile\s*\/’:
Password protecting a directory and all of it's subfolders using .htaccess
AuthType Basic
AuthName "restricted area"
AuthUserFile /path/to/the/directory/you/are/protecting/.htpasswd
require valid-user
<Directory /path/to/the/directory/of/htaccess>
Options Indexes FollowSymLinks MultiViews
AllowOverride All
</Directory>
Potential leak of data: Apache Configuration Directive
Detected 2 occurrence(s) of ‘authuserfile\s*\/’:
Password protect download directly in wordpress AuthUserFile /www/path/to/file/.htpasswd AuthGroupFile /dev/null AuthName "Confidential Information" AuthType Basic require user admin admin:password AuthUserFile /path/to/file/.htpasswd AuthGroupFile /dev/null AuthName "Confidential Information" AuthType Basic require valid-user htpasswd -bc /path/to/file/.htpasswd admin password

