jjlhlianfangzhizaoportmap
PortMap 时间:2021-04-03 阅读:(
)
InternetScanningCurrentStateandLessonsLearnedMarkSchloesser-Rapid7Labs@BlackHatUSA-August6th2014MarkSchloesserTwitter@repmovsbSecurityResearcheratRapid7LabsCoredeveloperforCuckooSandboxResearchonbotnets,malwareLotsofsmallersideprojects,dexlabs.
org(Android),honeypots,protocols$idQuickRecapInternetScanningIntro/History/Motivation/Ethics/etcProjectSonarResearch/FindingsAssetdiscoveryexampleusecaseOutlineLargescalescanningInternetwidedata-gatheringInternet-widescanningInternetMappingProject,BellLabs/Lumeta,1998+IPv4Census2003-2006EFFSSLObservatory2014InternetCensus2012(thebotnet)ShodanRIPEAtlas(slightlydifferent)Critical.
IO,2012-2013UniversityofMichiganShadowserverErrataSec(R.
Graham/masscan)Rapid7,ProjectSonarResearch/FindinghistoryTop3UPnPsoftwarestackscontainvulnerabilities/areexploitableMostwidespreadserviceontheInternet,millionsofdevicesaffected,patchrateslowuntiltodayIPMIServerManagementProtocolvulnerabilitiesServerManagementControllersauth-bypassandothervulnsWidespreadmisconfigurationsNTPDDoSamplificationproblemsknownsince2010OpenRecursors,OpenSMTPrelays,ElasticSearchinstances,etcMiningPsandQs,UMich/UCSDWeakkeysusedforSSLcommunicationusername=sapassword=Masterkey2011LicenseCheck=DefneDSN=sms;UID=XXX;PWD=XXXsys;DSN=GeoXXX;UID=XXX;PWD=XXXsys;8383passwordh4ve@gr8d3y--daemon--port8020--socks5--s_userWindows--s_passwordSystemXXXX/ssh/auth=password/user=admin/passwd=admin_p@s$wordhttp://a.
b.
c/manage/retail_login.
php3ms_id=14320101&passwd=7325a.
b.
c.
d:3389--useradministrator--passpassw0rd123SNMP–listprocesses,getcredentialsTelnet:RouterShells10,000+Routersdon'tevenbotherwithpasswordsjiuyuan_bt_nm_ah>jiyougongsi>jjcaisanxiaoxue>jjda>jjdc>jjgd>jjlhlianfangzhizao>jjpzx>jjshhshengangzhizao>jjxjy>jjxy>jjxz>jjyljuda>jkx_sdl>jnszy_2692>joelsmith>jsyh>jt_net>jtic>jx123>jzglkyzz>kashiwa>kbbmetro>kd-ip>mp1700-kslp>mp1700E>mp1762>mp2600e>mp2692>mp2700>msk-cat3>mty-3500-1>multivoice01>mvy-rtr-01>mx-fdc-dmz1>mx-frtsw01>mx-frtsw02>nak2ama-east-ps>nak2ama-north-ps>nak2ama-ps>nak2ama-south-ps>nak2ama-west-ps>naldi>nanchang2621>nanquc3550-02>nanshigaosu_A5>narashino>nayana2>telnet@AYRS-CES2k-1>telnet@AdminVideoSW1>telnet@BBG>telnet@BEL-WIFI-1>telnet@BGLWANSW01>telnet@BGLWANSW02>telnet@BI-RX-1>telnet@BI-Solsi>telnet@BIGION-CORE-1>telnet@BR2-NET1-MLXe>telnet@BRCD-ADX-2>telnet@BSI01>telnet@Backbone_Backup>telnet@BigIronRX-4Router>telnet@BigIronRX-8Router>telnet@BigIronRouter>telnet@Bloco.
A1.
Core>telnet@Bloco.
B.
Core>telnet@Border40G-1>telnet@Brocade_ABA_1>telnet@CHD-BOU-CO-2>telnet@CON-LONFESX4801>telnet@CON-LONFESX4802>S1-DNS-3560-NSGK>3,000+WindowsCEdevicesdropCMDshellsTelnet:WindowsCEShellsWelcometotheWindowsCETelnetServiceonWindowsCEPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonITPPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonWindowsCEPocketCMDv6.
00\>WelcometotheWindowsCETelnetServiceonWindowsCEPocketCMDv4.
20\>WelcometotheWindowsCETelnetServiceonPicoCOM2-SielaffPocketCMDv6.
00\>WelcometotheWindowsCETelnetServiceonWindowsCEPocketCMDv4.
10\>WelcometotheWindowsCETelnetServiceonG4-XRCPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonHMI_PanelPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonG4-XFCPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonPELOADPocketCMDv6.
00\>WelcometotheWindowsCETelnetServiceonMCGSPocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonDb1200PocketCMDv5.
0\>WelcometotheWindowsCETelnetServiceonVEUIICEPocketCMDv6.
00\>WelcometotheWindowsCETelnetServiceonBorneCebus/HorusPocketCMDv6.
00\>3,000+LinuxsystemsdroptorootTelnet:LinuxShellsMontaVista(R)Linux(R)ProfessionalEdition4.
0.
1(0502020)Linux/armv5tejlWelcometelnetroot@~#Localsystemtime:SunMay2004:12:49UTC2012root:#root@(unknown):/#root@routon-h1:/#root@umts_spyder:/#root@vanquish_u:/#root@smi:/#root@dinara_cg:/#root@BCS5200:/#root@edison:/#root@umts_yangtze:/#root@cdma_spyder:/#root@vanquish:/#root@scorpion_mini:/#root@qinara:/#sh-3.
00#Licenseplatereaders,ontheinternet,viaTelnetATZP372applicationAug29200816:07:45P372RAM:128M@128MEPROM:512kFlexcapabilities003fCamerafirmware:4.
34362ANPRenabledfor:USALouisiana.
Installedoptions:00220018*.
.
.
CompactFlash*.
.
.
BasicVESwithnosecurity*.
.
.
USALicenceplaterecognition*PIPSTechnologyAUTOPLATE(tm)licenseplaterecognition*VES-(violationenforcementsystem)Telnet:otherstuffSerialPortServersDevicesthatmakenetwork-disableddevicesintonetwork-enabledones.
Doesn'tsoundlikeagoodidea…Mostcommonaccessconfig(authenticated/encryptedmethodsavailable):Unauthenticatedclear-textTCPmultiplexportsUnauthenticatedTCPpass-throughportsExampleRemoteSerialPortsIPTVHeadendsystem,sometimesleftlogged-inElasticSearch,codeexecutionisafeatureBydefaultallows"dynamicscripting",executingcodeontheserverNotavulnerability,justmisconfigurationwhenservedonapublicIPwithoutfiltering/protectionOfcoursenottheonlyexample,seeMongoDB,andallotherSQLDBswithoutauthordefaultcredentialsFindingissuesandraisingawarenessaboutthemisimmenselyvaluable.
Rapid7LabsstartsProjectSonar(announcedbyHDatDerbycon2013)443/TCP-SSLCertificates80/TCP–HTTPGET/(IPvhost)ReverseDNS(PTRrecords)ForwardDNS(A/AAAA/ANYlookups)OtherSSLcertificatesources,STARTTLS,etcSeveralUDPprobesUPnP,IPMI,NTP,NetBios,MDNS,MSSQL,Portmap,SIP,etcSonar–Dataoverview443/TCP-SSLCertificates–weekly~40Mopenports,~25MSSLcerts,~55GBin100kdevicesexposedSomefalloutfrompreviousSupermicro/IPMI/BMCpublications(stillgivingawayroot…)Otherrecentfindings–indisclosureprocessUsescanningdatatobuildlookupdatabasesforIPsandnamesStartwithanarrayofdomainnamesandCIDRsandgenerateareportofassociatedassets/relevantdataQuickLivedemoforRapid7ExampleUse-CaseAssetDiscoveryMakedataavailabletotheSecuritycommunityCollaborationwithUniversityofMichiganRawScandatapublishedathttp://scans.
io/Historicalupload(critical.
io,Michigandata)Almost-real-timeuploadofrawscanoutputCollaborationishighlyimportanthttp://scans.
io/TheInternetisbroken.
Widespreadbugs,vulnerabilities,misconfigurationsWeakcredentialsLostandforgottendevices,embeddedhardwarepilingupwithoutupdatepossibilitiesWe'renotimprovingtheoverall"stateofsecurity"Can'tstressenoughtheimportanceofawarenessandvisibilityInternetscanningisapowerfultoolthatcandoalotofgoodforthecommunityIdentify/quantifyvulnerabilities,buildawarenessbeforetheyaremisusedMeasureimprovementscontinuouslyCollaborationisessentialfordatacollectionandanalysisMovingforwardZMapathttp://zmap.
io/ZMapBestPracticeshttps://zmap.
io/documentation.
html#bestpracticesJ.
AlexHaldermanon"FastInternet-wideScanninganditsSecurityApplications"at30C3(Germany)HDMoore'skeynote"ScanningDarkly"atDerbycon2013http://sonar.
labs.
rapid7.
com/MakesuretoalsocheckoutThanks!
Rapid7LabsMarkSchloessermark_schloesser@rapid7.
com@repmovsb
IonSwitch是一家2016年成立的国外VPS主机商,部落上一次分享的信息还停留在2019年,主机商提供基于KVM架构的VPS产品,数据中心之前在美国西雅图,目前是美国爱达荷州科德阿伦(美国西北部,西接华盛顿州和俄勒冈州),为新建的自营数据中心。商家针对新数据中心运行及4号独立日提供了一个5折优惠码,优惠后最低1GB内存套餐每月仅1.75美元起。下面列出部分套餐配置信息。CPU:1core内存...
halocloud怎么样?halocloud是一个于2019下半年建立的商家,主要提供日本软银VPS,广州移动VDS,株洲联通VDS,广州移动独立服务器,Halo邮局服务,Azure香港1000M带宽月抛机器等。日本软银vps,100M/200M/500M带宽,可看奈飞,香港azure1000M带宽,可以解锁奈飞等流媒体,有需要看奈飞的朋友可以入手!点击进入:halocloud官方网站地址日本vp...
关于Linode,这是一家运营超过18年的VPS云主机商家,产品支持随时删除(按小时计费),可选包括美国、英国、新加坡、日本、印度、加拿大、德国等全球十多个数据中心,最低每月费用5美元($0.0075/小时)起。目前,注册Linode的新用户添加付款方式后可以获得100美元赠送,有效期为60天,让更多新朋友可以体验Linode的产品和服务。Linode的云主机产品分为几类,下面分别列出几款套餐配置...
PortMap为你推荐
www.20ren.com有什么好看的电影吗?来几个…原代码什么是原代码777k7.comwww.777tk.com.怎么打不 开4400av.com在www.dadady.com 达达电影看片子很快的啊杨丽晓博客明星的最新博文www.789.com.cn有什么网站可以玩游戏的.www.hyyan.com请问我是HY了吗?在线等www.15job.com南方人才市场有官方网站是什么?本冈一郎本冈一郎的官网说是日本相扑用的,我们平常的人增肥可以吗?干支论坛查天干地支
网站空间商 天津虚拟主机 哈尔滨服务器租用 过期备案域名查询 最便宜虚拟主机 新网域名管理 warez 国外主机 burstnet 搜狗12306抢票助手 hnyd 常州联通宽带 如何建立邮箱 路由跟踪 ledlamp 杭州电信 小夜博客 xshell5注册码 zencart安装 wannacry勒索病毒 更多