Brute Force Attacks

github.com/hashicorp/consul is vulnerable to brute force attacks. Consul responds with a 403 when trying to destroy an invalid access token but a 404 when trying to clone an invalid token. Using this flaw an attacker can brute force a valid access token by logging the 403 forbidden responses...

Consul Detection via DNS

Binary data 9769.prm...

Consul Detection via HTTP

Binary data 9770.prm...