[viceCoolMan]

I'll start off by saying this has never happened consistently. After my DNS recon, I began gathering URLs to test, this was done with gospider and waybackurls. (does anyone remember when the spider option was available on the Burp Community edition?) Once the URLs were collected, I will start manually testing parameters for anomalies. On one page I remember seeing the 404 page come up but noticed the wheel spinning on the top of the browser.  This was an interesting find so I viewed the page source and noticed a bunch of what looked like config data. Next, I searched for "pass" and found SQL login creds along with SMTP creds. The code didn't handle the parameter properly and leaked a configuration file multiple times.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[DredgenSun]

Nice, you managed to get access when the site wasn't even online? :O

[Zix]

I need a more in-depth explanation. SMTP and database credentials? In the 404 page source!?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[viceCoolMan]

I need a more in-depth explanation. SMTP and database credentials? In the 404 page source!?

Fair enough, this was pretty interesting and this explanation was shit.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[hationes4553]

I've seen bad things. Like coredump files dumped into web pages after a BOF in a CGI, but this? Never. I wonder how it can even happen.

[viceCoolMan]

I've seen bad things. Like coredump files dumped into web pages after a BOF in a CGI, but this? Never. I wonder how it can even happen.

Yeah crazy, I got lucky because they fixed it shortly after but I'd already dumped the DB.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.