DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server
DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server
Exciting
May 18: I published details about the TeleMessage server's vulnerability in WIRED. TLDR: if anyone on the internet loaded the URL archive.telemessage.com/management/heapdump, they would download a Java heap dump from TeleMessage's archive server, containing plaintext chat logs, among other things.
Lmfao, absolute clown fiesta.
Funniest thing I've read. Like no way it was that easy.
Yup, apparently it’s a debug mode in Spring Boot that they just left on in production.
Who’s ass was using that old tech for this stack anyway and being like “oh this is just as secure but with logging!”
Guys it’s almost as if these old fascist pieces of shit didn’t grow up with tech at all
Holy fuck lmao
I never tire of people setting passwords to "password" level hacks.