what to do when u hack a website

A few months ago while digging i ended hacking a website i uploaded reverse shell and i was exploring the server i found it belong to a company and there was many projects sites in the server i had access all of them i ended up downloading the files for some of projects and their dbs and stopped

now i checked i found they still didn't find the bug and never checked the server it's been more than 6 months 🙃

i want to report the Vulnerability but I'm afraid to be in some troubles like they inspect and see that i download the files etc ... should i report or just leave it 🤔

submitted by /u/trafalgarDxlaw
[link] [comments]

from hacking: security in practice https://ift.tt/pJCIF1y

Comments