+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: got access to complte sensitive data (/showthread.php?tid=6288862)
got access to complte sensitive data - knightlearn - Jan 5, 2025
Hi guys so first of all i got some sensitive data from a website like api key, database host username password, razorpay data, aws bucket sensitive info.. all these due to a bug(Class App\Http\Controllers\Web\RegistrationsController does not exist
).
In that bug there was also this info on ui of website
/var/www/html/WebsiteNamewasHere/vendor/laravel/framework/src/Illuminate/Container/Container.php
}
/**
Instantiate a concrete instance of the given type.
@param string $concrete
@return mixed
@throws \Illuminate\Contracts\Container\BindingResolutionException
*/
public function build($concrete)
{
// If the concrete type is actually a Closure, we will just execute it and
// hand back the results of the functions, which allows functions to be
// used as resolvers for more fine-tuned resolution of these objects.
if ($concrete instanceof Closure) {
return $concrete($this, $this->getLastParameterOverride());
}
$reflector = new ReflectionClass($concrete);
// If the type is not instantiable, the developer is attempting to resolve
// an abstract type such as an Interface of Abstract Class and there is
// no binding registered for the abstractions so we need to bail out.
if (! $reflector->isInstantiable()) {
return $this->notInstantiable($concrete);
}
$this->buildStack[] = $concrete;
$constructor = $reflector->getConstructor();
// If there are no constructors, that means there are no dependencies then
// we can just resolve the instances of the objects right away, without
// resolving any other types or dependencies out of these containers.
if (is_null($constructor)) {
array_pop($this->buildStack);
return new $concrete;
}
Arguments
"Class App\Http\Controllers\Web\RegistrationsController does not exist"
How should i fix it?
RE: got access to complte sensitive data - DarkG8 - Jan 14, 2025
You are pro in hacking