exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

robots.txt.advisory

robots.txt.advisory
Posted Feb 1, 2000
Authored by Neeko

Sometimes administrators put directories in robots.txt that they want to hide from the search engines, without securing the directory. Sometimes the directories in robots.txt have interesting things in them.

tags | paper
SHA-256 | 8cd25df885343c07873c734d6dff7a63f38d84a3bfe29d8a677a4592abd2db5d

robots.txt.advisory

Change Mirror Download
                                           _
_ __ ___ ___| | _____
| '_ \ / _ \/ _ \ |/ / _ \
| | | | __/ __/ < (_) |
|_| |_|\___|\___|_|\_\___/
_
_ __ _ __ ___ ___ ___ _ __ | |_ ___
| '_ \| '__/ _ \/ __|/ _ \ '_ \| __/ __|
| |_) | | | __/\__ \ __/ | | | |_\__ \_ _ _
| .__/|_| \___||___/\___|_| |_|\__|___(_|_|_)
|_|

[This document best viewed at 80x25-- *cough* lynx]

[The Problem]-------------------|
The various coders of webspiders(robots) created a sort of "standard",
many webservers will contain a /robots.txt (http://example.com/robots.txt)...
In it are defined a list of directories a spider should not access.
Well, although not a problem within itself, lazy admins may add otherwise
unprotected directories to robots.txt believing noone would stumble across
them. (ie. your favorite porn site.)

[Vulnerability Level]-------------------|
Not horribly high, it's more of a "you can find wierd shit scanning for
robots.txt" kind of problem than a script kiddie rootshell.com issue.
You _will_ find some wierd things if you look...

[What to do]-------------------|
Admins: Make sure all the directories you don't want accessed by random
surfers are .htaccess'd (or the equivalent).
Kids: Modify some of those lame cgi-bin scanners and see if you can find a
few of the "Reporters and Stock holders Only" sections I've found.
(More harmless than rooting boxes, right?)

[Oops! I'm sorry]-------------------|
I've been sitting on this for ages for several reasons,
for one, I'm lazy. And the other (much more acceptable) reason would be
that I thought it to be rather common knowledge...

[References]
Only one,
Linkname: A Standard for Robot Exclusion
URL: http://info.webcrawler.com/mak/projects/robots/norobots.html
More information on the format of robots.txt, etc.

[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]

Another (quality?) advisory from neeko.
Contact me at: neeko@mc2.nu
Chill with some poetry.... http://www.angelfire.com/ca/optik9/poems.html

Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    0 Files
  • 16
    May 16th
    0 Files
  • 17
    May 17th
    0 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close