Mathstodon

0 posts0 participants0 posts today

Turris projectThanks to our <a href="https://fosstodon.org/tags/TurrisSentinel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TurrisSentinel</a> <a href="https://fosstodon.org/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://fosstodon.org/tags/research" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#research</a> program, <a href="https://fosstodon.org/tags/CZNIC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CZNIC</a> <a href="https://fosstodon.org/tags/CSIRT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CSIRT</a> team discovered large scale <a href="https://fosstodon.org/tags/FTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FTP</a> <a href="https://fosstodon.org/tags/attack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#attack</a>. Coming from 45.78.4.0/22, it is <a href="https://fosstodon.org/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> <a href="https://fosstodon.org/tags/slowly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#slowly</a> - it takes it 19 day to get through it's <a href="https://fosstodon.org/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a>. Big thanks to everybody who helps us by running our <a href="https://fosstodon.org/tags/minipots" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#minipots</a> on their devices! Report in <a href="https://fosstodon.org/tags/Czech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Czech</a> is available on CSIRT website <a href="https://csirt.cz/cs/kyberbezpecnost/aktualne-z-bezpecnosti/distribuovany-ftp-bruteforcer/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://csirt.cz/cs/kyberbezpecnost/aktualne-z-bezpecnosti/distribuovany-ftp-bruteforcer/</a>

postmodernHow many services have a default username, but can have a custom password? Redis comes to mind (<code>AUTH default password123</code>). <a href="https://infosec.exchange/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a>

Marco IvaldiA case of missing bytes: <a href="https://infosec.exchange/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> your way through <a href="https://infosec.exchange/tags/Jenkins" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Jenkins</a>' CVE-2024-23897(In which US crypto export restrictions prove to be still harmful after 25 years)<a href="https://www.errno.fr/bruteforcing_CVE-2024-23897.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.errno.fr/bruteforcing_CVE-2024-23897.html</a>

postmodernI decided to write a Ruby micro-framework for writing bruteforcers. In order to test my code, I would need bruteforce-able servers. So I created this bruteforceable repo of various apps and Dockerfiles. Please feel free to contribute some additional servers/Dockerfiles. Currently have FTP and HTTP Basic-Auth, still need HTTP Login Form, SMTP, POP3, IMAP, and RDP. What else am I missing? <a href="https://github.com/ronin-rb/bruteforceable" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/ronin-rb/bruteforceable</a> <a href="https://infosec.exchange/tags/bruteforcers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcers</a> <a href="https://infosec.exchange/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/dockerfiles" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dockerfiles</a>

Kevin Karhan :verified:<a href="https://mstdn.social/@gaycookie" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gaycookie</a> Nah...Personally I'd literally block all non-consumer-facing <a href="https://mstdn.social/tags/ISP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ISP</a>'s to prevent <a href="https://mstdn.social/tags/botting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#botting</a> and <a href="https://mstdn.social/tags/Spamming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Spamming</a> like <a href="https://mstdn.social/tags/BruteForcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BruteForcing</a> <a href="https://mstdn.social/tags/Credentials" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Credentials</a>.Shure that'll inconvenience some users like you and me but Microsoft doesn"t gove a damn about something >99% of users won't experience ever...

postmodernWhich wordlists do people use the most frequently or know by name? <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/wordlists" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordlists</a> <a href="https://infosec.exchange/tags/recon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#recon</a> <a href="https://infosec.exchange/tags/enumeration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enumeration</a> <a href="https://infosec.exchange/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a>

ITSEC NewsHEH P2P Botnet Sports Dangerous Wiper Function - The P2P malware is infecting any and all types of endpoints via brute-forcing, with 10 versions ta... <a href="https://threatpost.com/heh-p2p-botnet-wiper-function/159974/" rel="nofollow noopener noreferrer" target="_blank">https://threatpost.com/heh-p2p-botnet-wiper-function/159974/</a> <a href="https://schleuss.online/tags/malwareanalysis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malwareanalysis</a> <a href="https://schleuss.online/tags/mobilesecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mobilesecurity</a> <a href="https://schleuss.online/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> <a href="https://schleuss.online/tags/selfdestruct" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfdestruct</a> <a href="https://schleuss.online/tags/websecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#websecurity</a> <a href="https://schleuss.online/tags/peertopeer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#peertopeer</a> <a href="https://schleuss.online/tags/360netlab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#360netlab</a> <a href="https://schleuss.online/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://schleuss.online/tags/botnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#botnet</a> <a href="https://schleuss.online/tags/telnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#telnet</a> <a href="https://schleuss.online/tags/wiper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wiper</a> <a href="https://schleuss.online/tags/iot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iot</a> <a href="https://schleuss.online/tags/heh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#heh</a> <a href="https://schleuss.online/tags/p2p" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#p2p</a>

ITSEC NewsActivision Refutes Claims of 500K-Account Hack - The Call of Duty behemoth said that the reports of widespread hacks are false. <a href="https://threatpost.com/activision-refutes-claims-account-hack/159433/" rel="nofollow noopener noreferrer" target="_blank">https://threatpost.com/activision-refutes-claims-account-hack/159433/</a> <a href="https://schleuss.online/tags/twofactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twofactorauthentication</a> <a href="https://schleuss.online/tags/accounttakeover" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#accounttakeover</a> <a href="https://schleuss.online/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> <a href="https://schleuss.online/tags/websecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#websecurity</a> <a href="https://schleuss.online/tags/activision" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#activision</a> <a href="https://schleuss.online/tags/callofduty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#callofduty</a> <a href="https://schleuss.online/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a> <a href="https://schleuss.online/tags/accounts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#accounts</a> <a href="https://schleuss.online/tags/breach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#breach</a> <a href="https://schleuss.online/tags/denies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#denies</a> <a href="https://schleuss.online/tags/gaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gaming</a> <a href="https://schleuss.online/tags/hacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacks</a> <a href="https://schleuss.online/tags/hack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hack</a> <a href="https://schleuss.online/tags/ato" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ato</a>

ITSEC NewsAPT28 Mounts Rapid, Large-Scale Theft of Office 365 Logins - The Russia-linked threat group is harvesting credentials for Microsoft's cloud offering, and targe... <a href="https://threatpost.com/apt28-theft-office365-logins/159195/" rel="nofollow noopener noreferrer" target="_blank">https://threatpost.com/apt28-theft-office365-logins/159195/</a> <a href="https://schleuss.online/tags/2020presidentialelection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2020presidentialelection</a> <a href="https://schleuss.online/tags/credentialharvesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#credentialharvesting</a> <a href="https://schleuss.online/tags/passwordspraying" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordspraying</a> <a href="https://schleuss.online/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a> <a href="https://schleuss.online/tags/bruteforcing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bruteforcing</a> <a href="https://schleuss.online/tags/websecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#websecurity</a> <a href="https://schleuss.online/tags/government" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#government</a> <a href="https://schleuss.online/tags/fancybear" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fancybear</a> <a href="https://schleuss.online/tags/microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a href="https://schleuss.online/tags/office365" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#office365</a> <a href="https://schleuss.online/tags/strontium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#strontium</a> <a href="https://schleuss.online/tags/russia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#russia</a> <a href="https://schleuss.online/tags/sofacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sofacy</a> <a href="https://schleuss.online/tags/hacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacks</a> <a href="https://schleuss.online/tags/apt28" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apt28</a>

Recent searches

Search options

Administered by:

Server stats:

#bruteforcing