Index Of Password Txt Patched !exclusive! -

A major European university had a public-facing student portal. A scan for intitle:"index of" passwords.txt revealed an open directory at /old-students/backup/ . Inside: passwords.txt containing 12,000 plaintext student login credentials (usernames and hashed passwords from 2014). The server had not been patched in four years. After responsible disclosure, the admin applied the patch: Options -Indexes and forced password rotation.