Of course it isn’t.
It was behind a WAF. But that didn’t matter for the path traversal in this attack.
- 0 Posts
- 3 Comments
Joined 3 years ago
Cake day: June 13th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
It’s pretty common in a killchain following a server side request forgery since the traffic isn’t seem by the WAF.
Example: https://github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
They don’t have to scrape it. They just use the nominatim API like everybody else.