Collaborate Disseminate
I am looking for some type of public data set for my own internal research.
It should contains users and some type of identifiable information (IP, fingerprint, cookie etc…), at least some of the users in the data set should have had som… Continue reading Public dataset of compromised users
where do I find information on all the fields that I can use shodan to search by? For example I can find a specific ssl vendor’s certificates with ssl.cert.issuer.CN=asdf but what other fields can I search by?
Honestly Shodan’s documentati… Continue reading Where does Shodan document fields that I can search by?
Still thinking “the crooks probably won’t find me if I make a security blunder”? Continue reading MongoDB ransom threats step up from blackmail to full-on wiping
As COVID-19 slowly spread across the globe, consumer demand for commercial virtual private network (VPN) services has soared – both for security reasons and for bypassing geo-blocking of (streaming) content. Not unexpectedly, enterprise VPN use h… Continue reading RDP and VPN use soars, increasing enterprise cyber risk
You might want to unplug this not-so-smart robot: researchers found they can watch video streams piped out from its security camera.
Continue reading Ironpie robot vacuum can suck up your privacy
Palo Alto Networks’ Unit 42 researchers observed a variant of the wormlike botnet that adds scanner technology to brute-force Web authentication. Continue reading New Muhstik Botnet Attacks Target Tomato Routers
Can anyone provide some examples of ztag (https://github.com/zmap/ztag). I am trying to use it against a host that I found on the Internet, but ztag doesn’t seem to handle the input sent to it, and the “records_handled” is always zero. I a… Continue reading Need examples for ztag
I’ve noticed that the search engine Shodan grabs screenshots from hosts running an RDP service, even if they offer a certificate.
To my understanding, the certificate is used to authentify the server, and encrypt the traffic… Continue reading RDP with self-signed cert requiring password before launching display
A vulnerability in legacy Iomega and LenovoEMC network-attached storage (NAS) devices has led to many terabytes of potentially sensitive data being accessible to anyone via the Internet. About Iomega and LenovoEMC Iomega Corporation was acquired in 200… Continue reading Flaw in Iomega, LenovoEMC NAS devices exposes millions of files on the Internet
I’am looking for Joomla-sites using Shodan by this command http.component:”joomla” written in search box. So I recieve many joomla-sites. How can I find out what extension is using a web-site? For example,from list given here… Continue reading How to find extensions of Joomla-sites?