3 ms·
I kinda want to know the server's address so I can send a "hello_hn" message in the passwords there.
by ok_dad 3y ago
I kinda want to know the server's address so I can send a "hello_hn" message in the passwords there.
- spuz 3y agoI tried the IP resolved by the domain "brute.fail" but it doesn't accept SSH connections :)
- dmurray 3y agoThe Internet is not that big, though. You could potentially try all 2^32 IPv4 addresses with your password of choice and see when it came up here.
- Dwedit 3y agoThere's an infamous classic image out there titled "How to catch Script kiddies" which involves four nested For-loops, then placing the generated 1.1GB .txt file on a torrent site under the name "Every IP Address Ever (Hacker Tool)"
- sltkr 3y agoI tried mikedamm.com (the author's domain) and it does accept SSH but my failed login attempts don't show up.
- seabass-labrax 3y agoFun idea, but the data for this site (which is streamed via a WebSocket) doesn't contain that information :)
- fragmede 3y agoUpthread the author says one of the three servers is in Digital Ocean, which gives you an AS to target. Reverse engineer the web page so you can capture the websocket to your terminal, grep it for your IP, and search all of DO's ipv4 address space. use Shodan to limit your targets to only machines with an open port 22 to make it go faster.
- cyclotron3k 3y agoLooks like it's been figured out. People are basically using it at a chat service now