TGViewer
Channel Public Channel
Netlas.io

Netlas.io

@netlas

Explore the latest in cybersecurity with Netlas.io. Stay ahead with updates on high-profile vulnerabilities, expert tutorials, essential safety tips, and the latest Netlas developments.
Open in Telegram
Subscribers
2.34K
Photos
439
Videos
3
Links
581

Showing posts older than #74 · Back to latest

Older Posts 20 shown
Post #71 350
Dork list for Netlas.io has been updated on GitHub!

Two new categories: "Web cameras" and "VoIP", have been added, and old ones have been supplemented.

👉🏻 Link: https://github.com/netlas-io/netlas-dorks

Some new queries just waiting for you to test them.
  • 👍 3
  • 👾 3
Post #70 367
Using Netlas.io within Tines automations

This time we will tell you about working with Tines platform and the Netlas.io tools integrated into it. A little automation never hurt anyone :)

Read here 👉🏻
https://medium.com/@netlas/using-netlas-io-within-tines-automations-31518289e5e3
Medium Using Netlas.io within Tines automations Basics of building automated circuits in Tines and using Netlas.io searches in them. Creation of a mechanism for detecting virtual hosting.
  • 👾 4
  • 👍 1
Post #68 439
CVE-2023-25690: Request Smuggling attack on Apache HTTP Server with 9.8 rating 🔥

An old vulnerability, but a POC has been published today.

Search on Netlas.io (over 20 million results):
👉🏻 Link (with tags): https://nt.ls/bGPCz
👉🏻 Link (without tags): https://nt.ls/0Xh1g
👉🏻 Dork: tag.name:"apache" AND (tag.apache.version:>=2.4.0 AND tag.apache.version:<=2.4.55)
  • 👾 3
  • 🤷‍♂ 1
  • 👍 1
Post #67 366
CVE-2023-20159, CVE-2023-20160, CVE-2023-20161, CVE-2023-20189: Multiple vulns on the Cisco Small Business Switches. 8.6 rating ❗️

An attacker can cause DoS or perform remote code execution with root user rights. POC is available!

Search on Netlas.io:
👉🏻 Link: https://nt.ls/eIvyW
👉🏻 Dork: http.favicon.perceptual_hash:ffdb0113090009ff~1 AND http.body:"Small Business"
  • 🔥 4
  • 👾 2
Post #65 364
CVE-2023-25717: Ruckus Wireless Admin RCE with 9.8 rating 🔥

An old vulnerability that got a second chance with the advent of a new botnet type running through it.

Search on Netlas.io:
👉🏻 Dork: http.favicon.hash_sha256:44648ca99e1d18589d4b72b19156bf61117c09e311b9f26fa771d9acf5cf463f
👉🏻 Link: https://nt.ls/s1WYE

Read more about new botnet in the Fortinet article: https://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717
  • 👾 4
Post #64 304
Netlas is the sponsor of osintomatico conference

Do you love OSINT? So, then we have great news for you: Netlas became one of the sponsors of the osintomatico conf!

Soon, 10 CTF winners will receive certificates from us for a thousand bonus points to immerse deeper in research using our tool. Good luck to the participants!

Explore the event 👉 2023.osintomatico.com
  • 🏆 2
  • 👾 2
  • 👍 1
  • 🔥 1
Post #62 432
CVE-2023-27524: session validation attacks on Apache Superset with 8.9 ratings ‼️

Search vuln on Netlas.io:
👉🏻 Dork: (http.title:superset http.body:SUPERSET_WEBSERVER*) OR http.favicon.hash_sha256:e186603e51173d86bfc680eee24345d67c7a1d945a8e76dc4b218bbfabed666e
👉🏻 Link: https://nt.ls/XdO7p

Check if your software is vulnerable with a script from Horizon3 researchers: https://github.com/horizon3ai/CVE-2023-27524
  • 👾 4
  • ❤ 1
  • 👏 1
Post #60 358
🔥🖨🔥 PaperCut MF/NG RCE, rating 9.8

Vulnerabilities CVE-2023-27350 and CVE-2023-27351 discovered a few days ago allows unauthorized code execution in the SYSTEM context for PaperCut print management software. The software is used internally in most cases. And yet there are 1,1K instances exposed to the Internet.

Search on Netlas.io:
👉🏻 Link: https://nt.ls/ZGjrR

Vendor’s advisory: https://www.papercut.com/kb/Main/PO-1216-and-PO-1219
  • 👾 4
  • 👍 1
  • 🔥 1
Post #59 383
A big list of dorks for Netlas.io has been published on GitHub!

Link: https://github.com/netlas-io/netlas-dorks
☝️ Use it to find IoT elements, monitoring systems, and more.

Over time, this list will grow. You can also send us your dorks, and we will add them. Good hunting! 🔍
  • 👾 4
  • 👍 3
  • 👏 1
Post #57 337
SecurePoint Authentication vulnerability

"If you sit on the river bank for a long time, you can see how the sessionId of the administrator floats by"
- Sun Tzu.

CVE-2023-22620 requires a bit of patience as the attacker has to wait for the administrator to log in, catch his sessionId, and brute force the User-Agent. However, after that, this will give full control over the root panel of the firewall.

Look at Netlas.io:
👉🏻 Dork: http.favicon.hash_sha256:ebaaed8ab7c21856f888117edaf342f6bc10335106ed907f95787b69878d9d9e
👉🏻 Search: nt.ls/k9W35

Original article: https://www.rcesecurity.com/2023/04/securepwn-part-1-bypassing-securepoint-utms-authentication-cve-2023-22620/
  • 🔥 4
  • ❤ 1
  • 👾 1
Post #56 308
Both Domain Whois and IP Whois Datasets are finally published at https://app.netlas.io/datastore/.

Carefully collected and parsed by Netlas.io from major internet routing registries and domain registrants.

✓ IP WHOIS Database covers all existing IPv4 addresses (more than 4 billion addresses). Each entry contains both parsed data structure and raw text records.

✓ Domain WHOIS Database covers more than 270 millions active domains, including just registered, published and parked domains, domains on redeption grace period (waiting for renewal), and domains pending delete.

☝️All datasets and updates to them are available to Corporate and Enterprise subscribers for free.
  • 👍 5
  • 👾 5
Post #55 1.71K
An awesome guide to create a fast passive one-shot recon script with Netlas CLI tools.
Do not miss the github link at the end of the article!

https://link.medium.com/q5F85TIESyb
  • 👍 3
  • 👾 3
  • 🔥 2
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →