on shodan, ipv4

Oh, the shit you'll see on Shodan

Preface: The internet is full of garbage. The founders of the internet envisioned computers around the world, interconnected, forming a mass network. What they didn't envision, however, is a network of millions of devices competing for IPv4 namespace. The reason why I bring this up is because war-dialing…

on ssh, shodan

How a vendor's security negligence gave me root access to ticket vending machines across the US

This post details my experience with companyX, a popular vendor that sells ticket vending machines (referred to as TVMs) for bus agencies. This story is meant to educate others about the danger and risk associated with letting vendors run amuck without checking for security flaws. In my personal experience, most…