4 ms·

Naive question - What is the process like for a security researcher to go about 'discovering' an open database like this?

• deleted 7y ago
  [deleted]
• kitotik 7y ago
  I’d imagine it starts by port scanning known AWS IP blocks.
  • procinct 7y ago
    Isn’t this illegal? What happens if the owner decides to press charges instead of being thankful?
    • chefkoch 7y ago
      You get so many scans, failed logins that you can never press charges against them all. Imagine the reaction of law enforcement if you show up with 10 000 login attempts per day and you want to press charges.
• tushar-r 7y ago
  Start with running scans using shodan.io. Dig through results, start fine-tuning your searches and automating the digging.