News for hackers. Stuff that matters.
Re:Find and analyze any reachable server and device on the i... by matte_black on Thursday January 25, 2018 @11:39PM (#16237060)
I'm not a security expert, can someone explain to me how this product is used and why it's worth $1000 a month (or even more)? What's the alternative?
Re:Find and analyze any reachable server and device on the i... by strictnein on Thursday January 25, 2018 @11:48PM (#16237099)
Shodan.io is the alternative. Kind of the biggest player in this field.
Re:Find and analyze any reachable server and device on the i... by fulafel on Friday January 26, 2018 @12:33AM (#16237232)
Quoting the web page: "Enterprises use Censys to understand their network attack surfaces. CERTs and security researchers use it to discover new threats and assess their global impact."

The details depend on how much the of advertised scan data enrichment they do, but you might for example ask how many vulnerable cable modems of a certain model there are in the network you are responsible for, and what ISP networks they are on.

Re:Find and analyze any reachable server and device on the i... by gravypod on Thursday January 25, 2018 @11:43PM (#16237078)
You can likely take every public IP your organization has, run it through that, and see what your attack surface looks like. Very useful if you have an unmanageable and public computer network.
Re:Find and analyze any reachable server and device on the i... by cm2187 on Thursday January 25, 2018 @11:45PM (#16237082)
Isn't that something nmap does for free?
Re:Find and analyze any reachable server and device on the i... by gravypod on Thursday January 25, 2018 @11:51PM (#16237106)
Not for wan which is where most commercial firewalls will do their magic.

To do this on wan you need to run zmap which is considered mean.

Re:Find and analyze any reachable server and device on the i... by ngharo on Thursday January 25, 2018 @11:57PM (#16237124)
Huh. nmap cares not about wan vs lan.
Re:Find and analyze any reachable server and device on the i... by tastythrowaway on Friday January 26, 2018 @12:36AM (#16237239)
You're correct, but i think it's that zmap scans way, way faster than nmap
Re:Find and analyze any reachable server and device on the i... by tokenizerrr on Friday January 26, 2018 @07:55AM (#16238756)
Running software against my own IP space is considered mean?
Re:Find and analyze any reachable server and device on the i... by fredsted on Friday January 26, 2018 @01:46AM (#16237452)
There's no problem running nmap on WAN
Re:Find and analyze any reachable server and device on the i... by matte_black on Friday January 26, 2018 @01:46PM (#16241764)
So is this product overvalued?
Re:Find and analyze any reachable server and device on the i... by fredsted on Saturday January 27, 2018 @09:45AM (#16246375)
Censys? Probably not. It depends how much you value having the data provided in an easily digestible and searchable form that's hopefully updated often.

On the other hand, if you have a small subnet, say, less than a /24, you might as well just nmap it yourself, and then you're also guaranteed to have the latest possible scan.

Re:Find and analyze any reachable server and device on the i... by excalibur on Thursday January 25, 2018 @11:44PM (#16237079)
Maybe it's hush money.