21–30 of 40 posts
This is an extremely bad idea. Your chances of getting some malware are probably more likely than not, after playing around with something like this for 10+ minutes...
Earlier quoted context omitted.
Never thought of this. I constantly scan the internet using nmap, or similar, for pentest/bug bounty and never had a problem
How are you pentesting without knowing the IPs of your in-scope targets?
It found http://127.249.137.9 for me and it totally works! I can even ssh to it, let's try a fork bo^#@~ [connection reset by peer]
I have a few servers exposed on IP addresses, but they are not meant for public access. You have no authorization for 'messing' with this site: what you deem playing around, might be hacking.
You may also hit a government or military IP address, known or unknown. If you mess around with them, you may receive some unfriendly visits from men in black.
DO NOT DO THIS. I have a few servers exposed on IP addresses, but they are not meant for public access. You have no authorization for 'messing' with this site: what you deem playing around, might be hacking. You may also hit a government or military IP address, known or unknown. If you mess around with them, you may receive some unfriendly visits from men in black.
DO NOT DO THIS. I have a few servers exposed on IP addresses, but they are not meant for public access. You have no authorization for 'messing' with this site: what you deem playing around, might be hacking. You may also hit a government or military IP address, known or unknown. If you mess around with them, you may receive some unfriendly visits from men in black.
DO NOT DO THIS. I have a few servers exposed on IP addresses, but they are not meant for public access. You have no authorization for 'messing' with this site: what you deem playing around, might be hacking. You may also hit a government or military IP address, known or unknown. If you mess around with them, you may receive some unfriendly visits from men in black.
Then, I think, you need to implement "reasonable measures" to secure them. Otherwise it's like putting your stuff out by the curb.
This is an extremely bad idea. Your chances of getting some malware are probably more likely than not, after playing around with something like this for 10+ minutes...
How? The odds of hitting a site with a browser 0-day has to be extremely low, certainly not "more likely than not". Sure you might hit sites that try to get you to download malware, but just don't download anything.
I see other comments mentioning logging into random IPs over ssh. Now i trust the ssh client implementation more than most software, but it's easy to slip up and enable ssh agent forwarding for instance.
DO NOT DO THIS. I have a few servers exposed on IP addresses, but they are not meant for public access. You have no authorization for 'messing' with this site: what you deem playing around, might be hacking. You may also hit a government or military IP address, known or unknown. If you mess around with them, you may receive some unfriendly visits from men in black.