+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: what can i do if i am able to access target site's Druid Monitor (/showthread.php?tid=6191547)
what can i do if i am able to access target site's Druid Monitor - SIM-5137958 - Jan 31, 2022
Hi, i am trying to attack a site, and found an interesting page by url site.com/druid/, which navigates to a 'Druid Monitor', where i am able to view a lot of information, like sql logs (unfortunately can't see the result), and a bunch of server information.
it seems like i am not able to upload a image, otherwise u guys can have a good idea of what it looks like.
can anyone give me some suggestions on what can i go from here? Thanks
RE: what can i do if i am able to access target site's Druid Monitor - Beladonis - Jan 31, 2022
Here's some reading https://portswigger.net/web-security/information-disclosure
That is useful during the first steps of security assesments, gathering information about your target. In that case if you can read sys logs, that is a huge help to know things like what services (and versions) are running on the server. I have no idea what Druid is (besides a World of Warcraft class hehe) so I can't help more.
By the way, to post a screenshot when you don't have the privilege, you just host it somewhere like on https://ibb.co and you purposely break the url.