\nSince September 2015, the Google Hacking Database has added the ability to search for pages with open directories where you can view all files, including access credentials and passwords. To do this, you simply need to:
\n
![\"Hack](\"https:\/\/ukr.host\/kb\/wp-content\/uploads\/2018\/06\/wwwroot.jpg\")
\nSend the query intitle:”Index of” “wwwroot<\/strong> to the Google search engine, and we get a complete list of sites with open directories. Next, you need to select the site we need and follow the link.
\n
![\"hack](\"https:\/\/ukr.host\/kb\/wp-content\/uploads\/2018\/06\/wwwroot2.jpg\")
\nThis link will open the entire list of directories. You can browse through them and find the serverconfig.xml file \u2013 it contains all logins and passwords for databases. If the credentials also match SSH and FTP, then the hacker will have access to the server itself.
\nThe entire procedure takes no more than a few minutes (this is for a beginner). A hacker who knows their business can perform these actions automatically in just a few seconds.<\/p>\n
How to Prevent Website Hacking<\/h3>\n
Of course, no one wants to find themselves in such an unpleasant situation. It’s especially offensive when the system is hacked due to minor flaws that could have been eliminated initially, but over time brought many troubles. Therefore, immediately after creating a site, it’s better to seek help from professionals. Ukrhost company provides not only hosting placement and domain registration services, but also site maintenance during operation. A team of professionals will initially install modern protection from hacking and will monitor the security of your page 24 hours a day!<\/p>\n","protected":false},"excerpt":{"rendered":"