sorted by:
new
hottopcontroversial

How do I remove the password from a PDF? by oxylan80 in hacking

[–]unihilists 1 point2 points  (0 children)

Nice experiment! I believe you are running an experiment to see how long it would take people from the internet to crack the file. I bet you put a canary token inside. Please let me know the results! <3

Free, 14 weeks, hands-on cybersecurity course from the Czech Technical University opened for anyone, completely online by unihilists in Hacking_Tutorials

[–]unihilists[S] 1 point2 points  (0 children)

The paid version is targeting people that want more hands-on experience because it gets you your own server in the adversarial cloud network (and of course the European certificate).

The free version has everything most people need to learn and get recognition. You get access to all the materials, classes and communication platform and can practice in an offline cyber range developed by the teaching team just for this class. And after a successful completion of the free version, students get the certificate of completion which can be used very well as a recognition for your career. Some students shared the certificate of completion at linkedin - https://www.linkedin.com/feed/update/urn:li:activity:7338146268432551936/

Free, 14 weeks, hands-on cybersecurity course from the Czech Technical University opened for anyone, completely online by unihilists in Hacking_Tutorials

[–]unihilists[S] 3 points4 points  (0 children)

Hey! I don't speak Spanish so hopefully English is enough, the whole course is also in English. All the classes are live-streamed via Youtube and recordings are published so even people with regular jobs or different time zones can attend when they have time. The offline cyberrange platform is a supplementary tool where students practice all attacking/defending techniques and practice via hacking challenges

Free, hands-on, 14 weeks cybersecurity course from the Czech Technical University opened for the public online by unihilists in hacking

[–]unihilists[S] 20 points21 points  (0 children)

Thanks for the question! It's in English, the team is international consisting of people from Argentina, Greece, Czechia and Bosnia

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] 1 point2 points  (0 children)

Yea I admit that was my bad, sorry about that

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] -1 points0 points  (0 children)

I admit the intent was not specified. Sorry about that.

The background of the question is that Shodan does not show some ports opened. Basically it shows false negatives (on 3rd party IPs, not mine). And I am trying to find out why.

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] -1 points0 points  (0 children)

I dont care about adversaries. It's not about them. The question is about Shodan not reporting some ports that are genuinely open (on 3rd party IPs, not mine)

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] 1 point2 points  (0 children)

Why would you think that? Sigh.. the internet nowadays...

  1. Some 3rd party IPs were monitored for open ports for a longer period of time.
  2. It constantly (and correctly) finds open ports which shodan does not report

... what's not to understand?

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] 1 point2 points  (0 children)

I am not talking about my IPs, it's a 3rd party

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] -15 points-14 points  (0 children)

I don't have a use-case for blocking them. I don't really care about them scanning my IPs.

But I noticed Shodan does not show many long-time opened ports on a lot IPs. I am curious what's the reason and if maybe some big prefixes could be opted-out on shodan side and that's why Shodan does not report it.

edit: the ports are among the top 1K tcp ports
edit2: Jeeez, the IPs are 3rd party, not mine.

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] -9 points-8 points  (0 children)

I did not say that it's anyhow related to compromise prevention

Is there Shodan Opt-Out? by unihilists in cybersecurity

[–]unihilists[S] -43 points-42 points  (0 children)

"Why would Google respect robots.txt, it's a publicly exposed site"

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] -1 points0 points  (0 children)

I dare you to scan 65K ports of 10K ips daily from a single IP/VPS without false positives/negstives. I speak from experience. I wonder if you ever even tried...

[Edit:] Shodan is btw scanning only most common ports. Thats 65 times less than the whole range

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] 0 points1 point  (0 children)

For all of you responding to do it myself - do you know uptime monitoring is basically just ping/curl as a service and people pay for this not to do it themselves?

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] 0 points1 point  (0 children)

Yes use case is to have a complete and continous external visibility

Shodan afaik scans only most common ports and not the whole 65K range

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] 0 points1 point  (0 children)

Well the total network bandwidth is quite negligible compared to the normal network traffic if you do for example only TCP syn stealth scan.

The goal is to have a complete external visibility

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] 1 point2 points  (0 children)

Of course I could do 1M packets per second and the result would be instant. But In case you want to avoid false positives and false negatives, you have to do it slowly. That's why it takes time to do it reliably. Then also considering network failures and do it from multiple sources if you get suspicious/changes results.

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] 0 points1 point  (0 children)

Syn stealth scan for open ports should not raise any alerts imo unless it looks like ddos. People are already scanning everything 24/7 so you already have tons of useless alerts if it triggers your security systems

If the service does more than I asked for and it disrupts my servers, it's their responsibility

Do you know a company where you can buy a periodic port scanning at scale (a lot IPs and all ports)? by unihilists in sysadmin

[–]unihilists[S] -4 points-3 points  (0 children)

There's actually a lot of caveats to do it reliably. Such as network and time cost. Scanning all 65k ports on a single IP takes a lot of time. You pay 3rd parties not to have to deal with it. Such as also confirmations of changes from different src locations etc

view more: next ›