Mail.ru: Disclosure of information on static.dl.mail.ru

2017-01-29T15:44:59
ID H1:201948
Type hackerone
Reporter rbcafe
Modified 2017-02-12T13:24:28

Description

Greeting, I discovered a server with disclosure of information:

http://static.dl.mail.ru/

{F155883}

With this /webstat/ , we can access various information from the server like paths, name of files and other precious information.

http://static.dl.mail.ru/webstat/

{F155884} {F155885} {F155887}

We also access information from nst,nstats,nstrees

http://static.dl.mail.ru/nst http://static.dl.mail.ru/nstats http://static.dl.mail.ru/nstrees

Best regards @Rbcafe