3 ms·
2 Years of monitoring sensitive information pastebin dumps - @dumpmon (2015)
- bobsgame 9y agoI am also Time Magazine's 2006 Person Of The Year.
- bobsgame 9y agoHey, it's true! I thought it was cute.
- adulau 9y agoIf you are interested to run your own pastebin (or alike) analysis, AIL is a "modular framework to analyse potential information leaks from unstructured data sources like pastes from pastebin or similar services or unstructured data streams." https://github.com/CIRCL/AIL-framework https://github.com/CIRCL/AIL-framework
- jwcrux 9y agoWhoa that looks awesome. Nice work!
- GordonS 9y agoThis seems like a great idea, but taking a look at what the Twitter bot is posting shows it tweets a lot of false positives, such as hashes of files (which it presumably thinks might be password hashes)
- jwcrux 9y agoHi everyone, author of the post here. Happy to answer any questions.
- tyingq 9y agoThat's a pretty easy path to find targets, full details tweeted to you daily. And probably high rate of success, as somebody already felt the need to pastebin it. I worry about unprotected S3 buckets too. There's probably a Twitter bot coming soon for those: https://community.rapid7.com/community/infosec/blog/2013/03/27/1951-open-s3-buckets https://community.rapid7.com/community/infosec/blog/2013/03/...