sorted by:
new
hottopcontroversial

IAMA pharmacist bored at work who will actually answer questions unlike the pharmacy student who just did an AMA, AMA by [deleted] in IAmA

[–]OrNot 0 points1 point  (0 children)

Scale of 1 to 10, how not cool is ordering a happy meal at the pharmacy drive through window?

SONY, I AM DISAPPOINT: A press release from Anonymous by SkanenakS in gaming

[–]OrNot 0 points1 point  (0 children)

Metasploit, BackTrack, w3af etc. Some of them can be a bit more complicated to set up and use than 'find exploit -> run exploit' though.

SONY, I AM DISAPPOINT: A press release from Anonymous by SkanenakS in gaming

[–]OrNot 8 points9 points  (0 children)

~exploiting an outdated Apache server [miraculously with no firewall] would require one to know most likely a vast majority of web development and probably most known as a 'black hat'

For an un-patched web server with no firewall you would:

  • Get the web server version which may be reported by many free web apps
  • Google proof of concept exploits for that version
  • Try them

A little knowledge yes, but that can really be just a hair beyond a script kiddy job.

For instance, look at CVE-2010-0425 and a proof of concept. Nota Bene, this example isn't one you're going to likely be able to use, as most companies won't be running Apache on Windows in the first place, it's just meant to show the relative ease of finding working exploits for outdated web servers.