Replies to message #17,653

🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.

Yes, absolutely. It is not even a controversial question really. All you need is one successful RCE chain and then you get a shell and then you do...

its possible, but i couldnt say if its ever been done before without looking at logs, and honestly, sufficient logs to determine that probably...