Collaborate Disseminate
I have a port forwarding rule sending 23 traffic to a “honeypot” (called “comp” below). Throughout the night, many bots from around the world attempted to connect, but there was no service running.
Now, I wrote a C program t… Continue reading Why aren’t telnet bots finishing the three-way handshake?
Backdoors, likely intentional remote administration features, were closed off in 80 different Sony IP-enabled cameras running the IPELA Engine technology. Continue reading Sony Closes Backdoors in IP-Enabled Cameras
My understanding of worms like Mirai is the following:
Try to telnet/ssh into random IPs using default user/pass credentials from various router/IoT manufacturers
If you get in, do Bad Things™.
It seems the targets are ge… Continue reading IoT devices with public IP?
The European Commission is drafting new cybersecurity requirements to beef up security around so-called Internet of Things (IoT) devices such as Web-connected security cameras, routers and digital video recorders (DVRs). News of the expected proposal comes as security firms are warning that a great many IoT devices are equipped with little or no security protections. Continue reading Europe to Push New Security Rules Amid IoT Mess
The Zmodo ZP-NE14-S DVR and ZP-IBH-13W cameras contain hard-coded credentials and run telnet by default. Continue reading VU#301735: Zmodo ZP-NE14-S DVR and ZP-IBH-13W cameras contain hard-coded credentials
Rapid7 released its National Exposure Index, which measures the top 30 ports and protocols on IPv4 and quantifies unsecured services running on the Internet. Continue reading The Illusion Of An Encrypted Internet
When you fit a vehicle tracking unit, you don’t expect it to be open for everyone to track you… Continue reading Truckers: how anyone could track you on the IoT
If I have a domain www.mysite.com, and I am making a request to www.mysite.com on port 80 using telnet, but I send a host header with another domain name(www.wrong-domain.com), but the server doesn’t correctly verify if the h… Continue reading Http redirect using Location, but using falsely supplied data from host header