Testano i bug / bad practice più comuni e/o cercano di capire quali software/servizi sono installati sul server per poterne poi sfruttare i bug.
Esempio, questi sono alcuni degli errori 404 di ieri su un mio server:
codice:
404 Not Found
//PMA/: 1 Time(s)
//PMA2005/: 1 Time(s)
//admin/: 1 Time(s)
//dbadmin/: 1 Time(s)
//myadmin/: 1 Time(s)
//mysql-admin/: 1 Time(s)
//mysql/: 1 Time(s)
//mysqladmin/: 1 Time(s)
//p/m/a/: 1 Time(s)
//php-myadmin/: 1 Time(s)
//phpMyAdmin-2/: 1 Time(s)
//phpMyAdmin/: 1 Time(s)
//phpMyAdmin2/: 1 Time(s)
//phpmanager/: 1 Time(s)
//phpmy-admin/: 1 Time(s)
//phpmyadmin/: 1 Time(s)
//phpmyadmin2/: 1 Time(s)
//pma/: 1 Time(s)
//pma2005/: 1 Time(s)
//sql/: 1 Time(s)
//sqlweb/: 1 Time(s)
//webadmin/: 1 Time(s)
//webdb/: 1 Time(s)
//websql/: 1 Time(s)
/vicidial/project_auth_entries.txt: 1 Time(s)
/user/soapCaller.bs: 1 Time(s)
/MyAdmin/scripts/setup.php: 1 Time(s)
/myadmin/scripts/setup.php: 1 Time(s)
/phpMyAdmin/scripts/setup.php: 1 Time(s)
/phpmyadmin/scripts/setup.php: 1 Time(s)
/pma/scripts/setup.php: 1 Time(s)
Comunque credo vada in server o sicurezza.