3 ms·
I do regular scans myself and the number of these vulnerable DVR devices, printers, and routers you find exposed out there is mind-boggling! Run just a single
by wybiral 9y ago
I do regular scans myself and the number of these vulnerable DVR devices, printers, and routers you find exposed out there is mind-boggling!
Run just a single instance something like this [1] (which isn't even well optimized) and within minutes you'll find vulnerable devices. It shouldn't be that easy to build a botnet.
[1] https://github.com/wybiral/dex https://github.com/wybiral/dex
- lucb1e 9y agoYour readme doesn't say much. Looking at the scanner.py code, it appears you just send a GET HTTP/1.0 request and see what comes back. How do you determine vulnerable devices, response headers with versions?
- wybiral 9y agoThe response headers are kept in a SQLite db that you can perform regex queries on. It's surprisingly easy to find particular devices based on the headers. And, yes, it's just making basic HTTP requests on port 80 so it's overlooking tons of devices. But I run this from my own devices and doing blast scans of ports other than 80 can look a bit suspicious.
- AFNobody 9y agoDo you happen to know something similar that just targets LAN subnets?