Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

September 22, 2022

Google Hacking vs Criminal IP: Comparative Analysis of 2 filters

In this article, we compare and explain the search results and methods of Google Hacking’s intitle filter, which searches only sites with specific keywords in the title, and Criminal IP’s title filter. What is Google Hacking? Google Hacking is a service that uses Google Search…

Blog
Google Hacking vs Criminal IP: Comparative Analysis of 2 filters

September 20, 2022

[Criminal IP v1.2.8] 2022-09-20 Release Note

An update to Criminal IP v1.2.8 has been released. Major changes include: [Criminal IP v1.2.8] Release Notes Maintenance Period : 2022.09.20 06:00~08:00 AM (UTC) [New Change] Launch of Criminal IP’s Attack Surface Management Solution The new Attack Surface Management solution,…

Release Note
[Criminal IP v1.2.8] 2022-09-20 Release Note

September 16, 2022

Criminal IP Search 101 – How to Find Vulnerable Redis Commander Servers

Services such as Facebook, Instagram and Tumblr use Redis databases frequently. Therefore, it is important to know if your redis commander server is exposed to the open web. In this video, we’ll show you how these Redis commander servers are exposed on the internetand how to…

Notice
Criminal IP Search 101 – How to Find Vulnerable Redis Commander Servers

September 13, 2022

WordPress Vulnerability: Detecting Vulnerable WordPress Sites

This article explains how to find old versions of WordPress web servers that have not been patched for WordPress vulnerabilities and how to scan for vulnerabilities in webpages created with WordPress. What is WordPress Vulnerability? WordPress is a website creation and…

Blog
WordPress Vulnerability: Detecting Vulnerable WordPress Sites

September 8, 2022

How to Find Web Page Specific HTTP Status Code

HTTP status codes tell the client which actions were taken by the server with these requests. Some web pages expose the cause of the error along with the HTTP status code. And this could be a clue to a potential vulnerability that could be used in an attack. In this video, we…

Notice
How to Find Web Page Specific HTTP Status Code

September 6, 2022

Exposed Redis Commander: The Biggest Contributor to Database Leakage

Redis (Remote Dictionary Server) is a BSD license-based open-source project developed by Salvatore Sanfilippo in 2009 that queries data with Key through a Key-Value Store database. Since Redis is a memory-based DBMS, it operates at a faster speed than regular disk storage…

Blog
Exposed Redis Commander: The Biggest Contributor to Database Leakage

September 2, 2022

How to Search for Exposed MFP Admin Pages

MFPs, also known as Multifunction Printers, are printers that can scan and print documents, often while logging personal information on printer-specific admin pages. Given the nature of the documents they handle, any enterprising hacker can take advantage of this vulnerability.…

Notice
How to Search for Exposed MFP Admin Pages

August 30, 2022

Cloud Attack Surfaces: Detect Neglected AWS Assets

Plenty of vulnerable default welcome pages can be found on a cloud attack surface. Software engineers who understand AWS cloud characteristics or users who have encountered AWS’ default welcome pages can detect neglected systems in a default welcome page state using Open Source…

Blog
Cloud Attack Surfaces: Detect Neglected AWS Assets

August 26, 2022

A How to Guide on Identifying Instagram Phishing Scams

Instagram phishing problems are becoming an increasingly serious issue for all users of this social media, especially for business accounts. In this video, we cover how to use Criminal IP’s Domain Search to determine if the login page is real or a phishing scam. ▶️…

Notice
A How to Guide on Identifying Instagram Phishing Scams

August 25, 2022

[Criminal IP v1.2.5] 2022-08-25 Release Notes

An update to Criminal IP v1.2.5 has been released. Major changes include: [Criminal IP v1.2.5] Release Notes Release Date: 2022.08.25 06:00~08:00 AM (UTC) [New Change] Added phishing detection feature “Probability of Phishing URL” to Domain Search Results Summary Added a pop-up…

Release Note
[Criminal IP v1.2.5] 2022-08-25 Release Notes

August 25, 2022

Criminal IP ASM Integration Services now available on Logpresso

Criminal IP Attack Surface Management (ASM) is integrated into the SOAR (Security Orchestration, Automation, and Response) platform Logpresso. Criminal IP ASM can be executed on the Logpresso dashboard through the API provided by Criminal IP. So, IT assets exposed to the attack…

Notice
Criminal IP ASM Integration Services now available on Logpresso

August 24, 2022

Default welcome page exposure: A Significant Security Risk

Default welcome page exposure refers to default settings pages left neglected on the attack surface while the system is active. They are most commonly encountered at the beginning stages of installing and running systems, and are used to perform setup tasks. How Hackers Exploit…

Blog
Default welcome page exposure: A Significant Security Risk

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US