How do people do a full site dump?

K

kr_ilya2018-10-23 07:22:09

Information Security

kr_ilya, 2018-10-23 07:22:09

Sometimes I notice posts on the forums like - a complete dump of the site blah blah blah. Including base. How do people do it, what are these vulnerabilities and how to close them?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

A

Alexander, 2018-10-23
@kr_ilya

They go to the site through the admin panel and make a dump. Or connect to the server via ssh and also make a dump.
How to close the vulnerabilities:
Change the password from 123456 to something less predictable (No, qwerty doesn't work either).
Delete on the FTP server.
Do not connect to the server via SSH from under Windows.
Remove all questionable plugins from the site.
Update your CMS regularly with all the latest features.
If the site is self-written, delete it and replace it with a CMS.
If the site is on a server that can be accessed from the Internet, turn off the network.
If the server is running, turn it off.
Remove the storage devices from your server and put it in the microwave. Start the defrost program for 2 minutes.
Burn the microwave.
If you remember the contents of the site from memory [REDACTED BY ROSKOMNADZOR]