Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

Re:Show HN: Enter your URL and view CVEs affecting your stac... by Quekid5 on Monday September 09, 2019 @07:16PM (#20923565)

I'm always surprised by the mindset of the person you're replying to.

I learned a few years ago from some DEFCON video[0] that someone had figured out a way to do a (basic) port scan of the whole internet in ~1 day (or something like that).

Thing is... it really shouldn't have been that surprising. Although network latency isn't getting that much better year by year (c = c), the amount of data you can process in bulk, correlate, etc. is ever-increasing.

[0] At least, I think that was the conference.

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by nighthawk454 on Monday September 09, 2019 @07:30PM (#20923650)

In fact, there's a tool that claims to scan the internet in 6 minutes: https://github.com/robertdavidgraham/masscan

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by not_a_cop75 on Tuesday September 10, 2019 @01:17PM (#20930638)

To be fair anything that is sending like this is probably getting you network blocks:

"This program spews out packets very fast. On Windows, or from VMs, it can do 300,000 packets/second. On Linux (no virtualization) it'll do 1.6 million packets-per-second. That's fast enough to melt most networks."

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by kayfox on Wednesday September 11, 2019 @12:26PM (#20941913)

That's probably the DEFCON talk the parent poster is talking about:

Massscanning the Internet - Defcon 22 (2014)

https://www.youtube.com/watch?v=UOWexFaRylM

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by Quekid5 on Monday September 09, 2019 @07:52PM (#20923797)

Yes, thank you, I think that was the one. Only missed by an order of magnitude or so.

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by not_a_cop75 on Tuesday September 10, 2019 @01:11PM (#20930533)

Port scanning is a real and established thing that anyone who is even thinking of security has known about normally for decades, but port scans don't tell everyone what your whole stack consists of. Maybe you'd like to share why sharing your stack with everyone is a good idea? I'd really like to know. Thank you.

[ Parent | on HN ]

Re:Show HN: Enter your URL and view CVEs affecting your stac... by Quekid5 on Wednesday September 11, 2019 @05:09PM (#20944738)

Do you think that fingerprinting is quantitatively different from port scanning? My main point was just that a port scan can immediately identify the 0.1% (or whatever) of the Internet that you're interested in and then try more "invasive" probing.

(I should add that I forgot to mention that IpV6 does make the whole "PortScan the Internet" business a tad more complicated, so that's than argument against me.)

[ Parent | on HN ]