Default Web Content

This advisory describes the risks posed by default or leftover web server content—README/changelog files, sample programs, installation artifacts, images/favicons, and default admin interfaces—that enable fingerprinting and can lead to exploitation; it gives real examples (Tomcat, Confluence, WordPress, Drupal), outlines discovery and scanning tool types, and recommends remediation measures such as removing unnecessary files, applying access restrictions (e.g., .htaccess, IP whitelists, VPNs), and relocating or hardening admin interfaces.