Hacker News new | ask | show | jobs
by ryanlol 3195 days ago
It's 2017 and scanning /0 for PUT still reliably gets a bunch of shells...
2 comments
exikyut 3195 days ago
OH, that's a _netmask_. It took me an entire day to figure that out. I thought /0 was a path :)
link
kevindqc 3195 days ago
Why does that return a shell?
link
dogma1138 3195 days ago
Web shell via put, still quite common.

Just as common as dorking for common webshells with no or default passwords.

If you need a VPS fast googling for c99 is faster than spinning up something on AWS ;)

link
exikyut 3195 days ago
Would like to learn more about this.

Hmm... looks like this dropped from 20k to 700 while I wasn't looking, which I guess is a very good thing (these are DVRs!). But FWIW, for "JAWS/1.0 -2017 -2016" on shodan, then "/shell?whoami" returns "root". :)

link