5 ms·
"If you see any results like 192.168.0.4:3000 is available!, you should tell your colleague to secure whatever she has running on that port" Someone's going to
by jsty 7y ago
"If you see any results like 192.168.0.4:3000 is available!, you should tell your colleague to secure whatever she has running on that port"
Someone's going to access this page at $BIGCORP with an overly trigger-happy IDS and get a fun morning meeting with IT to un-quarantine their machine.
- chrisan 7y agoedit: I am a dolt. Thank you :) I got this address as well, do you have anything running on .4? It's just weird because I have .1 router, .2 AP, .3 pi-hole then .10 is when I start my static IPs and .100 is where my dhcp starts nmap says that host is down as well
- coob 7y agoThat just the example in the description, not the scan results.
- jsty 7y agoI think that's just the hardcoded example in the text, considering it's still there when I viewed with no scripts enabled (and I'm on a network that doesn't have anything assigned in 192.168.0.0/16).
- hanslet 7y agoThe page is using JavaScript with the JS WebRTC interface RTCPeerConnection[0]. Maybe that can help. [0] https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConn...
- nostalgk 7y agoYup, excited for the meeting. Haven't seen those guys in a while. Was expecting to learn some security techniques, instead got essentially port scanned :)
- jschwartzi 7y agoWhereas I'm learning that my network is fairly secure against this type of port scanning.
- deleted 7y ago[deleted]
- nostalgk 7y agoOf course, mine was too. I'm sure in part due to the diligent security team that will be stopping by my desk in the next few days!
- jschwartzi 7y agoSince I work from home I'm both the security team and the guy who inadvertently ran a port scanner in his web browser.