=== security.properties FULL === # JRun security properties can be controlled at the global or server level by # this file. # {jrun.root}/lib - global properties inherited by all servers on the same machine. # (Installed by default, current subnet only default) # {jrun.root}/servers/{server.name}/SERVER-INF - per server restrictions # (user must configure this manually) # # security.properties parameters # jrun.subnet.restriction - subnet mask for allowed access # default - 255.255.255.0 - current subnet only # # jrun.trusted.hosts - comma separated list of trusted hosts or IP addresses # default - blank (subnet restriction applies) # values # -- Missing or blank entry for either property will exclude it from consideration. # -- * in EITHER property means no restrictions (essentially and 'OR' condition) # * is NOT recommended for production use. # default configuration - current subnet only #jrun.subnet.restriction=255.255.255.0 #jrun.trusted.hosts= jrun.subnet.restriction=255.255.255.0 jrun.trusted.hosts= === search all cf files for admin password === /opt/coldfusion8/wwwroot/WEB-INF/cfclasses/cfApplication2ecfm310701800.class /opt/coldfusion8/wwwroot/WEB-INF/cfclasses/cf_authenticatewizarduser2ecfm2094425664.class /opt/coldfusion8/wwwroot/WEB-INF/cfclasses/cf_logintowizard2ecfm670248751.class /opt/coldfusion8/runtime/lib/wsconfig/psa/mod_jrun22.so === files mentioning password in WEB-INF (non-flex) === /opt/coldfusion8/wwwroot/WEB-INF/cftags/cache.cfm === look for salt/hash hex strings === /opt/coldfusion8/wwwroot/WEB-INF/jrun-web.xml /opt/coldfusion8/wwwroot/WEB-INF/web.xml /opt/coldfusion8/wwwroot/WEB-INF/gateway-config.xml /opt/coldfusion8/wwwroot/WEB-INF/exception/exception_en.xml /opt/coldfusion8/wwwroot/WEB-INF/exception/exception_ja.xml