[SIM-5137958]

Hi, i am trying to attack a site, and found an interesting page by url site.com/druid/, which navigates to a 'Druid Monitor', where i am able to view a lot of information, like sql logs (unfortunately can't see the result), and a bunch of server information.

it seems like i am not able to upload a image, otherwise u guys can have a good idea of what it looks like.

can anyone give me some suggestions on what can i go from here? Thanks

[Beladonis]

Here's some reading https://portswigger.net/web-security/inf...disclosure

That is useful during the first steps of security assesments, gathering information about your target. In that case if you can read sys logs, that is a huge help to know things like what services (and versions) are running on the server. I have no idea what Druid is (besides a World of Warcraft class hehe) so I can't help more.

By the way, to post a screenshot when you don't have the privilege, you just host it somewhere like on https://ibb.co and you purposely break the url.