How a Forgotten Apache Tomcat Instance Led to Session Hijacking on a Government Server
A 20-year-old server. Default example pages. A fake lottery ticket. And a stolen JSESSIONID. Continue reading on Medium » A 20-year-old server. Default example pages. A fake lottery ticket. And…