Submission Details
Impact:
Likelihood:
Mystery file in directory and named in .gitignore
Root + Impact
Description
-
We expect to know the purpose of all files in the directory. There should not be mystery files in the main directory of the project.
-
We find an unmentioned file called
youve-been-pwnedand we see the following in.gitignore:
youve-been-pwned
Risk
Likelihood:
There is nothing in the file, but its appearance is concerning, especially because it hints at hacking.
Impact:
Unknown code could somehow run.
Proof of Concept
The unknown file could potentially run unknown code.
<malicious code here>
Recommended Mitigation
Delete the file youve-been-pwned and remove the following from .gitignore :
- youve-been-pwned
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.