5 ms·
1 Resecurity's wordpress site has directory listing turned on. Most content on the website seems to have been uploaded in february. 2 The services that does the
by eikxyz 8y ago
1 Resecurity's wordpress site has directory listing turned on. Most content on the website seems to have been uploaded in february.
2 The services that does the press releases looks suspicious.
3 The second service also looks suspicious
4 Golden Bridge Silver and Gold Award winners... Anyone heard of this? Seems they sell thophies
[1] https://resecurity.com/wp-content/uploads/ https://resecurity.com/wp-content/uploads/
[2] https://www.prnewswire.com/news-releases/resecurity-names-ian-cook-as-strategic-adviser-300705772.html https://www.prnewswire.com/news-releases/resecurity-names-ia...
[3] https://www.businesswire.com/news/home/20190226005414/en/Resecurity-Recognized-Cybersecurity-Excellence-Awards-Forensics-Risk/ https://www.businesswire.com/news/home/20190226005414/en/Res...
[4] https://goldenbridgeawards.com/store/ https://goldenbridgeawards.com/store/
Looks like a fish, smells like a fish
- kristianc 8y agoWhat's suspicious about PR Newswire / Business Wire? They're the industry standard wire tools in Public Relations. The Golden Bridge trophies seem to be available to buy if you've won.
- hopler 8y agoOnly fake awards sell trophies. they give the award to everything and make money in trophy sales. See also SuperDoctors, Who's Who, and pay to publish journals with no peer reviews.
- laurentl 8y agoI don’t know specifically about Golden Bridge but I have been on the receiving end of other trophy clearinghouses: we were notified we had won a whatever of the year award without even applying for it and that we could purchase the actual trophy for a very reasonable price. Basically these companies’ business is selling overpriced crystal trinkets.
- kristianc 8y agoAs have I, it's a fairly common racket. However, rights to a trophy / rights to use the logo etc are also sold by perfectly legitimate awards too.
- technion 8y agoThanks for finding that. This image from their directory listing (maybe on their site somewhere but I couldn't find it) shows me at least something about their offering - looks like another dark web breach alerting service. https://resecurity.com/wp-content/uploads/2019/02/slide-3.png https://resecurity.com/wp-content/uploads/2019/02/slide-3.pn...
- dud3333 8y agohttps://resecurity.com/wp-content/uploads/2018/05/wp_res2.sql_.txt https://resecurity.com/wp-content/uploads/2018/05/wp_res2.sq... seriously?
- nolok 8y agoUnsecured directory listing of a common php cms that shows uploads, and one of them them is a full DB dump made with phpmyadmin. The only thing missing is execution rights in that directory. This is either an insider joke or a jump back to 2004.
- dud3333 8y agothis is "wordpress-normal" - the funny/sad part is its the wordpress blog of a security company investigating a huge breach...
- crankylinuxuser 8y agoWell, its better to get some wordpress hacked, than it is to have a server onprem get pwned and used as a inadvertent bastion to your internal network.
- deleted 8y ago[deleted]
- pbhjpbhj 8y agoI've never seen directory listing turned on as a normal part of WP install.
- groestl 8y agoUnless this is actually not a security company investigating a huge breach.
- flattone 8y agophpmyadmin is apprx. the only thing i remember about making a website.
- chias 8y agoThey also seem to have stolen a number of graphics on their website. If you check their filenames, they have the default filename of when you take a screenshot on OSX. Then take this one for example: https://resecurity.com/wp-content/uploads/2019/03/Screen-Shot-2019-03-07-at-1.14.07-PM.png https://resecurity.com/wp-content/uploads/2019/03/Screen-Sho... Throw it into Google's reverse image search and you'll find the graphic if was cut out of: https://www.incimages.com/uploaded_files/image/970x450/Finance_Blockchain_364306.jpg https://www.incimages.com/uploaded_files/image/970x450/Finan...
- downandout 8y agoFYI, PRNewswire is one of the oldest, respected, and expensive newswire services around. Businesswire is also very well established. Not sure how those seem “suspicious”.
- tyingq 8y agoNot sure if that was meant to be sarcastic. They have a pretty clear history of accepting garbage for money. https://www.seroundtable.com/google-panda-pr-newswire-changes-18770.html https://www.seroundtable.com/google-panda-pr-newswire-change...
- downandout 8y agoPRNewswire is used by the vast majority of the Fortune 1000, including for releases that are required for SEC compliance. They are probably the oldest and most widely used of all the newswire services. The point is that using PRNewswire or Businesswire is hardly “suspicious,” because most businesses that do press releases use one or the other.