I usually just ignore that stuff. There is constant probing of my web server on MIM. It's kindof fun to see all kind of stuff they are trying. Also a good reference to see all kind of problems and exploits that exists on Unix and Windows web servers...
(I *think* my RSX web server is actually pretty safe, but who knows...)
Trying to retaliate would be an endless battle which I don't care about anyway...
But attacking them back is kinda funny, oh here's one more script in case there's no HTTP:
--- gohydra ---
#p1 = host, p2 = port, p3 = service
hydra -P ~/words -l fuckyou -s $2 $1 $3
--- end gohydra ---
On 2012-12-29 18:21, sampsa at mac.com wrote:
I occasionally get people trying to get into the Internet facing parts of my stuff, I usually reply with these:
--- cznmap --- runs nmap at timing=INSANE to find open ports
nmap -T5 -sV $1
--- end cznmap ---
There's usually something serving HTTP, after which I run this:
--- fcku ---
while :
do
curl http://$1:$2/FUCKYOU &> /dev/null
done
--- end fcku ---
Stops the login attempts pretty quickly I've found.
I usually just ignore that stuff. There is constant probing of my web server on MIM. It's kindof fun to see all kind of stuff they are trying. Also a good reference to see all kind of problems and exploits that exists on Unix and Windows web servers...
(I *think* my RSX web server is actually pretty safe, but who knows...)
Trying to retaliate would be an endless battle which I don't care about anyway...
But it is fun to see people fail. :-)
Johnny
I occasionally get people trying to get into the Internet facing parts of my stuff, I usually reply with these:
--- cznmap --- runs nmap at timing=INSANE to find open ports
nmap -T5 -sV $1
--- end cznmap ---
There's usually something serving HTTP, after which I run this:
--- fcku ---
while :
do
curl http://$1:$2/FUCKYOU &> /dev/null
done
--- end fcku ---
Stops the login attempts pretty quickly I've found.
---
Sampsa Laine <sampsa at mac.com>
On 29 Dec 2012, at 18:43, sampsa at mac.com wrote:
On 29 Dec 2012, at 18:12, Johnny Billquist <bqt at softjar.se> wrote:
Sure. Why not. I can add a link on my page as well, and I could add a couple of links on my Hecnet page... I'll do that.
Anyone else have some web resource that would be nice to have a link to from the HECnet page?
Johnny
Actually since we're using GETs, we could put the link in the RESULTS, so it goes and gets the info for that node from the other service in another window.
Adding that now.
Sampsa
Done. Check out http://rhesus.sampsa.com/cgi-bin/hecnetinfo/hecnetinfo.com?q=chimpy
At the bottom of the info.txt is a link to your service.
Sampsa
On 29 Dec 2012, at 18:12, Johnny Billquist <bqt at softjar.se> wrote:
Sure. Why not. I can add a link on my page as well, and I could add a couple of links on my Hecnet page... I'll do that.
Anyone else have some web resource that would be nice to have a link to from the HECnet page?
Johnny
Actually since we're using GETs, we could put the link in the RESULTS, so it goes and gets the info for that node from the other service in another window.
Adding that now.
Sampsa
On 2012-12-29 17:06, Bob Armstrong wrote:
... you have configured your DECnet with a large enough value in the
executive for maximum boradcast routers
How many broadcast routers are there on HECnet now?
Total? No idea. But there are around 15 or so on the bridge, I think.
Johnny
Sure. Why not. I can add a link on my page as well, and I could add a couple of links on my Hecnet page... I'll do that.
Anyone else have some web resource that would be nice to have a link to from the HECnet page?
Johnny
On 2012-12-29 17:03, sampsa at mac.com wrote:
Want me to add a link to rhesus.sampsa.com's info server to yours?
On 29 Dec 2012, at 17:42, Johnny Billquist <bqt at softjar.se> wrote:
On 2012-12-29 16:31, sampsa at mac.com wrote:
On 29 Dec 2012, at 17:29, Johnny Billquist <bqt at softjar.se> wrote:
By the way, I tossed together something similar for RSX, which runs on MIM. Just check http://madame.update.uu.se/~bqt/hecnet
Didn't do much beyond a proof of concept thing, but at this point, it could easily be extended in any direction wanted.
I'd add trying to grab the INFO.TXT file for one.
Yeah. Could do that, and lots of other things as well... Oh, hang on, I'll pull some info from my backend nodename database, which atleast have a couple of other fun things to present...
Johnny
... you have configured your DECnet with a large enough value in the
executive for maximum boradcast routers
How many broadcast routers are there on HECnet now?
Bob
Want me to add a link to rhesus.sampsa.com's info server to yours?
On 29 Dec 2012, at 17:42, Johnny Billquist <bqt at softjar.se> wrote:
On 2012-12-29 16:31, sampsa at mac.com wrote:
On 29 Dec 2012, at 17:29, Johnny Billquist <bqt at softjar.se> wrote:
By the way, I tossed together something similar for RSX, which runs on MIM. Just check http://madame.update.uu.se/~bqt/hecnet
Didn't do much beyond a proof of concept thing, but at this point, it could easily be extended in any direction wanted.
I'd add trying to grab the INFO.TXT file for one.
Yeah. Could do that, and lots of other things as well... Oh, hang on, I'll pull some info from my backend nodename database, which atleast have a couple of other fun things to present...
Johnny
On 2012-12-29 16:31, sampsa at mac.com wrote:
On 29 Dec 2012, at 17:29, Johnny Billquist <bqt at softjar.se> wrote:
By the way, I tossed together something similar for RSX, which runs on MIM. Just check http://madame.update.uu.se/~bqt/hecnet
Didn't do much beyond a proof of concept thing, but at this point, it could easily be extended in any direction wanted.
I'd add trying to grab the INFO.TXT file for one.
Yeah. Could do that, and lots of other things as well... Oh, hang on, I'll pull some info from my backend nodename database, which atleast have a couple of other fun things to present...
Johnny
