When you don’t realize you’re bleeding or data leaks without hacking by Ivan Glinkin

Sometimes, to get personal or other private information there is no need to crack the system. Web-site owners and/or system administrators have not set policies andrules properly that allows getting unauthorized privileged access or read closed data. The most important thing is that kind of information is publicly available and hackers may not be punished at all for an any activity with it (at least by the Russian law). In this article I will show one of my recent construction company pentest and what issues I’ve been able to reveal. 1. Reconnaissance The pentest area is a web-site based on the 1C-Bitrix CMS upon the NGinx web-server. Based on the whois output, the site is situated on the Russian public web-hosting. I assume there is a simple VPS (virtual private server) because it’s unnecessary to hold the high-performance system for a simple informer site. Let’s look at the web-site and....