5 ms·

I suppose you could just loop through all the IPs for some common ranges like 10.0.0.0/16 and 192.168.0.0/16 looking for a given port, if you knew the toothbrus

I suppose you could just loop through all the IPs for some common ranges like 10.0.0.0/16 and 192.168.0.0/16 looking for a given port, if you knew the toothbrushes exposed it and there was something exploitable there, that makes sense.

metadat 3y ago
Even 192.168.1.0/8 will probably get you ~95% coverage for residential networks.
- Retr0id 3y ago
  It's even easier if the device has assigned itself a "toothbrush.local" hostname via mDNS etc.
- gnabgib 3y ago
  Did you mean /24? As low as /16 is valid, but /8 includes plenty of public addresses.
  - metadat 3y ago
    Thanks, you're right!