Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
October 24, 2022
How to Find Open Port Vulnerabilities
Ports are used as a unit to distinguish between network services and processes, with numbers ranging from 0 to 65535. Port 0 to 1023 are called well-known ports and they are used to identify a network service on a private or public network. Some open ports are left in blind…
October 21, 2022
Security Vulnerabilities That Allow Editing Exposed NGINX Configuration Files
이번 CIP 블로그에서는 Criminal IP를 활용하여 노출된 NGINX 설정 파일 을 탐색하는 방법을 알아보고자 한다. NGINX 설정 파일 이란? NGINX는 웹 서버의 종류 중 하나로 Apache와 함께 가장 많이 사용되는 서버이기도 하다. 특히나 현재 가장 트래픽이 많은 사이트인 넷플릭스나 드롭박스 등 열거하기도 힘들 정도로 많은 유명 사이트들이 NGINX를 이용하고 있다. NGINX의 설정 파일은 NGINX 서버를 설정하는 형태에 대한 가이드가 적힌 파일로, 해당 서버에 대한 정보가…
October 14, 2022
How to Find Exposed Jenkins Servers
Check out this tutorial on finding exposed Jenkins servers using the title filter and the tech_stack filter. In this video, we talk about the vulnerabilities present in vulnerable Jenkins servers, and how they can be a vulnerable part of a company’s Attack Surface. ▶️ CIP:…
October 14, 2022
Detecting Microsoft Exchange Zero-day Vulnerabilities with the Security OSINT Tool
On September 30, 2022, Microsoft announced security updates for two zero-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019. This article covers how to use the security OSINT tool to find servers with these vulnerabilities and a case study of an…
October 11, 2022
IP Intelligence: How to Handle IP Addresses That Attempt to Bypass Anti-spam Solutions
To stop spam emails, it is common for companies to implement several anti-spam solutions, such as spam filters, in their mail servers. Nevertheless, there are many cases where anti-spam solutions are often bypassed. In order to bypass the anti-spam system, attackers use official…
October 7, 2022
How to Find Exposed SCADA Servers
SCADA (Supervisory Control and Data Acquisition) is a computer system that monitors sand controls industrial control systems. SCADA servers are likely to be a target of cyberterrorism because of their weak security. In this video, we will be showing you how to find exposed and…
October 5, 2022
Government Servers Hacked by the Unseen Cryptojackers
Recently, it was discovered that a South Korean government server was infected by malware in 2017 and used for cryptomining. However, the problem comes from the fact that this malware has been undiscovered for several years. The hacked equipment in question was installed to…
September 30, 2022
How to Find Old WordPress Servers
Check out this tutorial on finding outdated WordPress webpages using the tech_stack filter. In this video, we talk about the vulnerabilities present in old WordPress versions, and how they can be used by hackers for malicious ends. ▶️ CIP: https://www.criminalip.io▶️ CIP…
September 30, 2022
Detect OpenVPN Vulnerability That Makes Paid VPNs Free
이 글은 구글 해킹 등의 OSINT 툴로 OpenVPN 취약점 탐지 방법 및 OVPN 파일 유출로 인해 유료 VPN을 무단으로 사용할 수 있는 보안 결함에 대해 다룬다. OpenVPN에 필수인 OVPN 파일 OVPN 파일은 OpenVPN 프로토콜을 사용하여 VPN을 연결할 때 필요한 설정 파일이다. 파일에는 VPN 서버 주소와 인증을 위해 사용하는 암호 키 등이 포함되어 있어, VPN을 시작하는 데에 매우 중요한 파일이다. 그렇기 때문에 OVPN 파일이 외부에 노출되는 것은 할당 받은 사용자가…
September 27, 2022
[Criminal IP v1.2.11] 2022-09-27 Release Note
An update to Criminal IP v1.2.11 has been released. Major changes include: [Criminal IP v1.2.11] Release Notes Maintenance Period : 2022.09.27 06:00~08:00 AM (UTC) [New Feature] Restructuring Domain Search API Added /v1/domain/status/[id]: An API that allows you to check…
![[Criminal IP v1.2.11] 2022-09-27 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2022%2F09%2Frelease-220927.webp%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
September 23, 2022
LockBit 3.0 Ransomware Case Study: A Huge Cybersecurity Risk
In this article, we will analyze LockBit 3.0 ransomware attack cases to show you how attacks similar to these cases can be prevented. What is LockBit 3.0 Ransomware? LockBit 3.0 (also known as LockBit Black) is ransomware created by the cybercrime syndicate LockBit. The first…
September 23, 2022
How to Find Expired SSL Certificat Websites
Tutorial on finding web pages with expired SSL certificates, using SSL _Expired filter.If a site owner missed renewal period and it expired, information entered in the browser may be exposed to potential hackers. Most of all, the vulnerability of the website’s security settings…
Join AI SPERA
Be part of the AI SPERA journey.
