phuip-fpizdam

phuip-fpizdam copied to clipboard

Question only: docker-splitted enviroments attackable?

2

Just a technical question, our servers are updated :) We use a splitted enviroment where nginx runs in one container, php-fpm in another. I tried to reproduce the issue with...

hersche

What is the origin of the `fpizdam` name?

9

Inquiring Romanian speakers want to know...

dandv

jusso-dev

Incorrect error handling?

4

After the attack paras were found exploit freezes and aborts if the connection is interrupted ``` 2019/10/25 11:02:48 Using attack params --qsl 1740 --pisos 7 --skip-detect 2019/10/25 11:02:48 Performing attack...

geosphere

implement attack that uses only .php endings

6

This is attempt to fix #1. The attack works (but it needs POST requests now). However, I haven't came up with any detection method which is short enough.

neex