X / xAI · Report #137404

List of a ton of internal twitter servers available on GitHub

Informativestatus

4upvotes

17 Oct 2016disclosed

How it was found

The page at https://raw.githubusercontent.com/adi2909/basic-py/0532539f86cbb584aa7bfd8cc357fc9df4c25c03/data/allHostInfo.json

has a ton of internal info about twitter hosts, including MACs, NICs, other hardware info, and hostnames. This data, albeit a little dated, gives an attacker an excellent view into hardware, patching status, and network topology.

I've uploaded a parsed JSON of this information

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original