Research, demonstrations, and popcorn
Arris is one of the single largest providers of cable internet modems in the United States and around the world. I was playing around with this a bit tonight while bored and came up with a simple way to cause…
This is a quick post on enabling authentication on your MongoDB instance, but the first thing you should do is bring the MongoDB inside your network if possible. If it is not exposed externally, there is a far lower…
I have written a simple multithreaded application used to Shodan exports for open MongoDB instances and report on ransom demands. This tool is on GitHub and is released for free use. The only caveat is that you may…
After doing some research into MongoDB for the company I currently work for, I started looking around at some servers online. What I found was amazing. Database servers almost never need to be exposed on the perimeter of a network, but…
Note: This was originally posted to LinkedIn, but I have moved it over here to go along with the update I posted about the explosion of malicious ransom demands. MongoDB by default does not have very good security…
Recently I posted an article on LinkedIn about MongoDB security… well, it turns out that this has exploded into a big issue. Over the last two weeks malicious hackers have been going crazy with extortion schemes. Hackers are…
There are three reasons an exploit may exist in code: poorly written code, logic failure on the part of the developer, or in the case of this exploit, using something in a way that was never intended or tested. Arguably,…
A vulnerability was discovered in some NetGear routers that allows remote command execution by visiting a malicious site or a legitimate site that has malicious ads served to it via AdSense or any number of other ad services. The…
The issues around voting are enormous. I couldn’t even pretend to know them all or understand the full impact. Especially without being able to examine the voting machines being utilized for this election. That being said, there are…
As most everyone is well aware, there has been a breach at the National Security Agency. At some point, data and tools from some of the most protected areas of the NSA were stolen. On Monday (2016-08-15), a…
