EquationGroup Tool Leak – ExtraBacon Demo

Re:EquationGroup Tool Leak – ExtraBacon Demo by Zombieball on Tuesday August 16, 2016 @04:47PM (#12300519)

Thanks! #2 definitely seems like a big issue. I can imagine many "internal" services that are potentially insecure.

[ Parent | on HN ]

Re:EquationGroup Tool Leak – ExtraBacon Demo by Vendan on Tuesday August 16, 2016 @11:54PM (#12302417)

My fav is IPMI. Many devices allow you to log in using cipher 0... basically, if you know the username, you get access. The rest... well, IMPI has a hash disclosure built into the protocol. If you can guess a username, you can get (and try to crack) the password.

[ Parent | on HN ]