opsdisk

Automated network port change detection. Scan17 provides a solution to the question:

So your CTO decides to outsource firewall management - and the vendor carelessly leaves a network port open, exposing your production database. How does your team find out before an attacker?

Think of it as nmap port scan diff-ing. If a network port goes from closed to open you get an email or webhook alert. There is a REST API for automated workflows and privately hosted engines will be supported for some plans. There is a wait-list form on the website if you want to stay in the loop.

If you work in infosec / cyber security and are interested in being an early product designer / beta tester, let's chat! See my profile for how to get in touch.

tl;dr - misconfigured reverse proxies allowed cloud metadata URL access across the bigger cloud providers.

[1] https://github.com/opsdisk/cloud_metadata_extractor/blob/mas...

[2] https://www.youtube.com/watch?v=vxReTpBCmh8

My shameful promotion to level up your SSH tunneling and port redirection game:

* $10 for the interactive lab - The Cyber Plumber's Lab Guide and Access https://opsdisk.gumroad.com/l/cphlab/blackfriday2021

* The accompanying book is free: https://github.com/opsdisk/the_cyber_plumbers_handbook

I made it free to the HN community a few years back [1]. There is a paid interactive lab portion (details in the repo) if you are looking for hands-on experience.

Book Overview

This book is packed with practical and real world examples of SSH tunneling and port redirection in multiple realistic scenarios. It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers.

Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploit's Meterpreter, browsing the Internet through a SOCKS proxy, utilizing proxychains and nmap to scan targets, and leveraging Metasploit's Meterpreter portfwd command.

[1] https://news.ycombinator.com/item?id=19946941

Book Overview

This book is packed with practical and real world examples of SSH tunneling and port redirection in multiple realistic scenarios. It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers.

Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploit's Meterpreter, browsing the Internet through a SOCKS proxy, utilizing proxychains and nmap to scan targets, and leveraging Metasploit's Meterpreter portfwd command.

[1] https://news.ycombinator.com/item?id=19946941

So you're not using nmap under the hood?

What's the largest IP space you've tested it on so far?

https://gum.co/cph_book_and_lab/hackernews20210207

Edit: Never mind, looks like it's Nessus (https://help.intruder.io/en/articles/3167760-internal-vulner...)

https://github.com/opsdisk/pygumroad

https://www.modelfkeyboards.com/product/flipperspring/