Ok, now what would you do if you want to find out the accounts on guruji's server.
Try out the URL of the type http://guruji.com/~user
which tries accessing the home directory of a user called "user". The user does not exist. Fair enough.
It is safe to assume that there would be a root account on the machine so try out http://guruji.com/~root
See the difference?
The first URL gives you a 404 Not found error.
Not Found
The requested URL /~dummy was not found on this server.
Apache/1.3.31 Server at tw-s220.terrawiz.com Port 80
where as the root gives you a 403 forbidden error.
Forbidden
You don't have permission to access /~root on this server.
Apache/1.3.31 Server at tw-s220.terrawiz.com Port 80
So if you have the patience to try out user names and see if they exist on the machine, go ahead.
Disclaimer: this blog post is for educational purposes only.
4 comments:
aunching it vernacular search 2maro
wanna check it before launch just mail me
What?
Moreover I do not have your mail id
I guess yahoo is not providing you a website like blogspot,blogger,orkut or google adsense. So, in spite of becoming employee of yahoo you bag services from gr8 google.
Poor yahoo! and poor yahoo! employee....
East or west google is the best.
Haha @ vicky!
How narrow minded can people get?
Just because Yahoo! and Google and competitors doesnt mean that we cannot use services offered by others. I am sure almost all Google employees have Yahoo! ids. But looking at your comment these are concepts you would not understand.
But you are entitled to your views. So in my opinion you can go around jumping like a sissy girl shouting how cool Google is (in your opinion) and I dont give a damn!
You should try flickr.com and pipes.yahoo.com sometime.
BTW how were your commments related to my blog post?
Post a Comment