Errata Security

Last week, many people saw what they thought was an Apache 0day. They say logs with lots of suggestive strings that looked like this: [2...

Besides the well-known transport protocols of TCP and UDP, there is also one called SCTP. It's been included in Windows, Linux, Mac OS X...

I've written a tool 'masscan' that's become more popular than I thought it would be. I've decided I need a logo for it. ...

My port scanner (masscan) can easily transmit at full 1-gbps speeds, even from a slow laptop. Yet, often when you run it, it fails to run t...

Like many programmers, one of the things I like to do is design my own crypto algorithms. Specifically, at the heart of my port-scanner mass...

My portscanner, masscan , also does ARP scanning. Sure, there exists other ARP scanning tools (like arpscan ), but I'm too lazy to learn...

One of the oldest/biggest "hacker" conventions is the CCC congress every December in Germany. This year, they are promising 100-gb...

This last weekend, an interesting backdoor was found in D-Link routers when a certain user-agent is set. How many Internet-accessible router...

I've written a program that can effortlessly scan the entire Internet ( masscan ). Unfortunately, scanning the Internet is against most ...

My port scanner (masscan) can transmit at the maximum speed of Ethernet. So what does that mean? A 1-gbps Ethernet link has the precise bi...

As I posted last week , intrusion detection systems (IDS) are catching me doing Internet-scale surveys. This gives me a chance to try and e...

We've been scanning the entire Internet for a while, and amuse ourselves reading the "abuse" complaints. Those with firewalls...

I'm scanning the entire Internet for SNMP (UDP port 161) right now: masscan 0.0.0.0/0 -pU:161 --banners SNMP is the "simple ne...

So I'm scanning the Internet with a DNS version request, because it'd be a useful datapoint in my Friday #Brucon talk mentioning tha...

I thought I'd write up some notes about my " masscan " port mapper. Masscan is the fastest port scanner, more than 10 tim...

Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to ...