Wednesday 4 November
Global

Your region, kept on this device.

Scans for leftover test e-mail scripts rise on SANS honeypots

Severity
Low
Sources
1

Attackers are searching websites for old test scripts that were left online by mistake. These scripts can be abused to send spam or reveal details about the server. The researchers say the main lesson is to remove development files before a site goes live.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Check your own web servers for the test e-mail script paths listed in the report.
  2. Remove development and test scripts such as mailtest.php from live websites.
  3. Check public web servers for exposed credential and secret files.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Wed 4 NovemberThe Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)SANS Internet Storm Center

Who reported · 1 outlet

SANS Internet Storm Center

Who and what is in it

Report a problem