Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

Re: ws_ftp.log
From: Steve Kudlak <chromazine () sbcglobal net>
Date: Sun, 15 Aug 2004 13:47:00 -0700


Giggle! I remember when I was first recovering from a serious
illness and I had been off line for two years. It was pretty gloomy
and I wasn't expected to make it. When I  did recover lots of my
life had that "whee! I am alive and this is interesting, and that is
interesting and the girls are pretty...."  aspect and it drove my
friends who had been around and who were overworked up the wall.

Have Fun,
Sends Steve

morning_wood wrote:

your serious??
this issue has been arround for about 10 years...
try googling "ws_ftp.ini" where you can simply drop the
ini in your ws_ftp folder, convert the hashes or import into your
favorite ftp client that supports ws_ftp.ini style format.


m.wood

----- Original Message ----- From: "Gaurang Pandya" <gaubrig () yahoo com>
To: <full-disclosure () lists netsys com>
Sent: Sunday, August 15, 2004 5:19 AM
Subject: [Full-disclosure] ws_ftp.log


Hi,

WS_FTP is a popular & feature rich ftp client. It
makes upload/download as easy as drag & drop. But
mostly peoples using this forget that it creates a log
file with name ws_ftp.log. This file holds sensitive
data such as file source/destination and file name,
date/time of upload etc., People when use this to
upload files to their website, never know that along
with other files even ws_ftp.log file also gets
uploaded to the webserver, making it globally
accessible.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]