4 ms·

Is there an inexpensive service out there that does “mock” attacks if you give it a bunch of host names and ports? I know it’s something you could create yourse

Is there an inexpensive service out there that does “mock” attacks if you give it a bunch of host names and ports? I know it’s something you could create yourself but would be nice to have a third party try to connect to your databases and immediately alert you if it was able to gain access. Would especially be useful if you were tinkering with firewall/security settings and accidentally opened something up.

stjo 6y ago
Metasploit kinda fits the description
edoceo 6y ago
Run OpenVAS against your infrastructure. It's free cost, nearly free in time. Edit: I also do this as a service, have for years, and hammer my own system monthly.
- ZephyrBlu 6y ago
  Ironically, when I go their website I get a warning because their certificate has expired. https://openvas.org/ https://openvas.org/
  - edoceo 6y ago
    Oof, and it expired today. I'm going to slide into their DMs.
achillean 6y ago
Shodan Monitor will do it and if you're only keeping track of <= 16 IPs then you would just need the membership which is a one-time payment of $49 (i.e. no subscription cost) for a lifetime account upgrade (https://www.shodan.io/store/member https://www.shodan.io/store/member). You just provide an IP/ network/ domain and we'll notify you if anything changes or becomes vulnerable. It's basically Google Alerts but for network ports: https://monitor.shodan.io https://monitor.shodan.io Disclaimer: I'm the founder of Shodan.
- anitil 6y ago
  That's a cool product, didn't realise Shodan did that
- AznHisoka 6y ago
  Thanks that’s exactly what I was looking for. I didn’t want an open source DIY option because I am lazy and just want to plug in Ips and ports. Also just curious, what’s your annual revenue like?
  - achillean 6y ago
    We don't share revenue information but we've seen steady growth for the past 10+ years. All I can say is that Shodan is a profitable, bootstrapped business with >3.5 million users, 80%+ of Fortune 100 and thousands of universities (we let them setup monitoring for free for up to 120k IPs).
- emilburzo 6y ago
  I'm using this and really love it, but it's annoying if you want to use a domain name instead of IPs, because if the DNS records change the old IPs stay in with the new ones.
  - achillean 6y ago
    That shouldn't be happening, can you confirm? It should flush out the old ones based on the current DNS information. The whole point is to automatically update the alerts based on the latest DNS information so you don't need to manage that yourself.
    - emilburzo 6y ago
      It was happening at least until June 6 2020, I removed that particular domain after that. If you want I can re-add it and ping you if it happens again. (where can I ping you?) I also had a support ticket around that time about this but never got an answer, guess it got lost.

stjo 6y ago

Metasploit kinda fits the description

edoceo 6y ago

Run OpenVAS against your infrastructure. It's free cost, nearly free in time. Edit: I also do this as a service, have for years, and hammer my own system monthly.

ZephyrBlu 6y ago
Ironically, when I go their website I get a warning because their certificate has expired. https://openvas.org/ https://openvas.org/
- edoceo 6y ago
  Oof, and it expired today. I'm going to slide into their DMs.

achillean 6y ago

Shodan Monitor will do it and if you're only keeping track of <= 16 IPs then you would just need the membership which is a one-time payment of $49 (i.e. no subscription cost) for a lifetime account upgrade (https://www.shodan.io/store/member https://www.shodan.io/store/member). You just provide an IP/ network/ domain and we'll notify you if anything changes or becomes vulnerable. It's basically Google Alerts but for network ports: https://monitor.shodan.io https://monitor.shodan.io Disclaimer: I'm the founder of Shodan.

anitil 6y ago
That's a cool product, didn't realise Shodan did that
AznHisoka 6y ago
Thanks that’s exactly what I was looking for. I didn’t want an open source DIY option because I am lazy and just want to plug in Ips and ports. Also just curious, what’s your annual revenue like?
- achillean 6y ago
  We don't share revenue information but we've seen steady growth for the past 10+ years. All I can say is that Shodan is a profitable, bootstrapped business with >3.5 million users, 80%+ of Fortune 100 and thousands of universities (we let them setup monitoring for free for up to 120k IPs).
emilburzo 6y ago
I'm using this and really love it, but it's annoying if you want to use a domain name instead of IPs, because if the DNS records change the old IPs stay in with the new ones.
- achillean 6y ago
  That shouldn't be happening, can you confirm? It should flush out the old ones based on the current DNS information. The whole point is to automatically update the alerts based on the latest DNS information so you don't need to manage that yourself.
  - emilburzo 6y ago
    It was happening at least until June 6 2020, I removed that particular domain after that. If you want I can re-add it and ping you if it happens again. (where can I ping you?) I also had a support ticket around that time about this but never got an answer, guess it got lost.