danielcid

7 ms·

1.
Show HN: Web Metadata search. Search for headers, apps, CMSs, and versions(dnsarchive.net)
2 points by danielcid 1y ago|0 comments
2.
by danielcid 1y ago
Mostly because of sub domains. They are counting all the sub domains requests to give the top domains ranking. Some of those have many trackers and background sub domains that add up. For example, Linkedin their most popular sub domain is:
3.
by danielcid 1y ago
And they are often used with random sub domains as well (but they did not include sub domains in their list). Ex: https://dnsarchive.net/search?q=cmidphnvq.com https://dnsarchive.net/search?q=xmqkychtb htt
4.
Show HN: Web Metadata search. Search for headers, web apps, CMSs, and versions(dnsarchive.net)
2 points by danielcid 1y ago|0 comments
5.
Investigating the 'Slince_golden' WordPress Backdoor(trunc.org)
1 points by danielcid 1y ago|0 comments
6.
Hacked WordPress – over 17,000 spam links injected post compromise(noc.org)
2 points by danielcid 4y ago|0 comments
7.
AWS Credential Harvesting Scans – looking for –/.aws/credentials files(trunc.org)
2 points by danielcid 4y ago|0 comments
8.
The Mozlila user agent and why it is part of many web attack campaigns(trunc.org)
39 points by danielcid 4y ago|1 comments
9.
How a PHP Backdoor on a compromised WordPress site is used for DDoS Attacks(noc.org)
5 points by danielcid 4y ago|0 comments
10.
Investigating a hacked WordPress site on Linode being used as a DDoS relay(trunc.org)
3 points by danielcid 4y ago|1 comments
11.
Analyzing a HTTP DDoS against a website. 7k IPs and over 20k requests per second(trunc.org)
4 points by danielcid 4y ago|0 comments
12.
by danielcid 4y ago
I do the same. 3 different browsers: work, personal and random stuff. Keeping them isolated from each other clears the clutter and my focus when working.
13.
Analysing the latest Brute force attacks against Windows Remote Desktop(trunc.org)
1 points by danielcid 4y ago|0 comments
14.
by danielcid 4y ago
They are also blocking noc.social (another mastodon instance). Wonder if more are impacted.
15.
by danielcid 4y ago
They are also blocking noc.social (another mastodon instance). Wonder if more are impacted.
16.
by danielcid 4y ago
And if you are having a hard time finding accounts there, I have been maintaining this tool: https://search.noc.social/ to search for accounts across all instances.
17.
by danielcid 6y ago
Recently joined the decentralized social network and struggled to find people to engage and follow. Since there is no centralization, could not find a easy way to search for accounts. Built this little tool for myself mostly, but sharing as
18.
Show HN: Discover and search for accounts across multiple Mastodon instances(search.noc.social)
4 points by danielcid 6y ago|2 comments
19.
Guide on how to block porn content – and protect your kids online(cleanbrowsing.org)
3 points by danielcid 6y ago|1 comments
20.
WordPress and Formidable Forms and Shortcodes Ultimate Exploits in the Wild(blog.sucuri.net)
1 points by danielcid 9y ago|0 comments
21.
by danielcid 10y ago
We are seeing attacks in the wild for it already. Mostly defacement attempts at the moment. Marc, the researcher that found it, wrote the technical details here: https://blog.sucuri.net/2017/02/content-injection-vu
22.
by danielcid 10y ago
I managed an open source project (OSSEC) for many years and this was a common question I would hear. I gave some hints here: http://dcid.me/notes/2013-may-12 That I hope can be useful for you. thanks,
23.
by danielcid 10y ago
That's a problem that will only get worse. To give an example, last year, Incapsula recorded ~9,000 IoT cameras attacking them. A few months ago, Sucuri recorded ~25,000. CloudFlare is seeing close to 50k. And that's the attackers
24.
by danielcid 10y ago
Very fun read. I love following the train of thought and seeing where they "failed". Also, this Elasticsearch RCE has been patched a while ago and we still see a lot of servers hacked because of it. In fact, there is a DDoS botnet
25.
IPv4 x IPv6 performance comparison across the world(blog.sucuri.net)
21 points by danielcid 10y ago|0 comments
26.
Large IoT CCTV Botnet Leveraged in DDoS Attacks(blog.sucuri.net)
5 points by danielcid 10y ago|0 comments
27.
Critical 0-day Remote Command Execution Vulnerability in Joomla(blog.sucuri.net)
13 points by danielcid 11y ago|0 comments
28.
by danielcid 11y ago
Good (related) read about this vulnerability by the Trustwave team: https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-S...
29.
by danielcid 11y ago
Curious why you say that of Sucuri? Have you tried us recently? We have some very very large sites using our services now with great performance. During the last 6-12 months we basically rewrote our entire stack, built our anycast network a