Live data from Hacker News

Humiliating IIS servers for fun and jail time

mll.sh

41–50 of 106 posts

Re: Humiliating IIS servers for fun and jail time

#42
post #36

Earlier quoted context omitted.

Unless you're honeypotting in the IP range of an established organization, all you're doing is getting bot traffic. High-tier blackhats focus on big targets, and low-tier ones focus on low-hanging fruits they find off shodan or application 0days they've found.

"Guys, guys, guys, listen, listen, listen. So I'm in this computer, right? So I'm lookin' around, lookin' around, throwing commands at it, I don't know where it is or what it does or anything..."

joey, is that you!?

Re: Humiliating IIS servers for fun and jail time

#45
post #38

Earlier quoted context omitted.

I would say 75% of my webservers are IIS. Nothing internet facing mind.

but...why?

Really simple.

I read the prerequisites of whatever software im asked to install and do what it says.

I'm not spending the next 3 years of my life trying to make some monitoring platform run on WebLogic i have other jobs to do in 4-8-12 hours.

Re: Humiliating IIS servers for fun and jail time

#47
post #36

Earlier quoted context omitted.

Unless you're honeypotting in the IP range of an established organization, all you're doing is getting bot traffic. High-tier blackhats focus on big targets, and low-tier ones focus on low-hanging fruits they find off shodan or application 0days they've found.

"Guys, guys, guys, listen, listen, listen. So I'm in this computer, right? So I'm lookin' around, lookin' around, throwing commands at it, I don't know where it is or what it does or anything..."

Where's that from?

Re: Humiliating IIS servers for fun and jail time

#48
post #44
post #14

Earlier quoted context omitted.

Several times, I wondered if Claude wrote it.

"This is the brute-force fallback when the smart approaches fail, and honestly, it works more often than you’d expect." Found the LLM generated part.

Honestly, given how much claude-based prose I was recently reading, I am worried I will soon begin to write in this style naturally.

Re: Humiliating IIS servers for fun and jail time

#49
post #15

Does anyone use IIS anymore?

Some banks still use IIS. Every large company big enough to host an intranet is running IIS somewhere, possibly everywhere. It integrates well with AD so some really complex tasks become stupid simple. It's seeing less and less usage as the world moves to AWS which is equally stupid because you're tied to one vendor's proprietary products (Amazon) again. Except this time you don't own the hardware. Public sector IT l…

Heyyy what's wrong with novel groupwise?

Re: Humiliating IIS servers for fun and jail time

#50
post #47
post #36

Earlier quoted context omitted.

"Guys, guys, guys, listen, listen, listen. So I'm in this computer, right? So I'm lookin' around, lookin' around, throwing commands at it, I don't know where it is or what it does or anything..."

Where's that from?

I think it's from hackers, Joey the youngest hacker found the bad guys computers, not sure if it's an accurate quote since it's been years since I saw it.
Post reply on HN