I'm guessing glowmin's SSL cert expired. When I audited his server everything there was incredibly old. He was running like SSH versions years out of date and web servers that had like 50+ vulnerabilities. The feels software also seems to have been reused from the original in which it used fixed dependency versions from like 5+ year old software. Some of which was now unmaintained. I found other shit, mostly it was bad configuration. There were almost certainly DoS vectors on the server to crash stuff if a man baby were so inclined.
Going to go drink some coffee, can't sleep, maybe ill just get up early or some shit.
#1423
3 weeks ago