maride/penretem
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

De-personalize the initial example setup

Browse Source
This commit is contained in:
maride
2026-01-28 13:56:46 +01:00
parent 98c0f72e0d
commit 6ec9365e55
3 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
findings.typ
+1 -1
View File
@@ -14,7 +14,7 @@ Administrative web applications and interfaces enable the management of organiza
=== Finding
When searching for administration interfaces, the applications `Uptime Kuma` at `https://status.maride.inv` and `Nginx Proxy Manager` at `https://nginx.maride.inv` were found. The URLs of the administration interfaces were found via TLS Transparency Logs#footnote[https://letsencrypt.org/docs/ct-logs/].
When searching for administration interfaces, the applications `Uptime Kuma` at `https://status.ellingson-mineral.co` and `Nginx Proxy Manager` at `https://nginx.ellingson-mineral.co` were found. The URLs of the administration interfaces were found via TLS Transparency Logs#footnote[https://letsencrypt.org/docs/ct-logs/].
Both applications have a login screen and cannot be used by unauthorized visitors. Since administration accounts are set up during the initial configuration of the applications, it was not possible to log in using default credentials. A brute force attack was not performed to check for common passwords.