National Exposure Index 2017

Today, Rapid7 is releasing the second National Exposure Index, our effort to quantify the exposure that nations are taking on by offering public services on the internet--not just the webservers like the one hosting this blog, but also unencrypted POP3, IMAPv4, telnet, database servers, SMB, and...

Project Sonar - Mo' Data, Mo' Research

Since its inception, Rapid7's Project Sonar has aimed to share the data and knowledge we've gained from our Internet scanning and collection activities with the larger information security community. Over the years this has resulted in vulnerability disclosures, research papers, conference...

Cross Platform DNS Recon Tool: Sonar

Sonar is a reconnaissance tool for enumerating sub domains. It was modeled after Knock and DNSRecon though explicitly not written in Python to avoid the limitations of threading and dependencies. Sonar is statically compiled meaning it has no dependencies and even dynamically builds the default...

Trey Ford on Mapping the Internet with Project Sonar

Trey Ford from Project Sonar describes the group’s initiative at Kaspersky’s Security Analyst Summit. The Rapid7 service scans public networks for applications, software, and hardware, then analyzes that cache of information to learn trends and gain insight on common vulnerabilities. Trey Ford...

Ceragon Networks Microwave Bridges Root Password Discovered

The Department of Homeland security warned users of Ceragon Networks microwave bridges that the devices contain an undocumented root password. The advisory said Ceragon FibeAir IP-10 Microwave Bridges can be accessed remotely. “The root account can be accessed through ssh, telnet, command line...

NAT-PMP Security Vulnerability Affects 1.2M Routers

Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...

Scan Shows 65% of ReadyNAS Boxes on Web Vulnerable to Critical Bug

It’s been known for some time now–several months, in fact–that there is a critical, remotely exploitable vulnerability in some of Netgear’s ReadyNAS storage boxes, and a patch has been available since July. However, many of the boxes exposed to the Web are still vulnerable, and a recent scan by H...

Sonar 3.4.1 Cross Site Scripting Vulnerability

Sonar version 3.4.1 suffers from a cross site scripting vulnerability. Sonar v.3.4.1 = XSS CWE-79 + Vendor info http://www.sonarsource.com/ Dork : intext:"Powered by SonarSource" ========================================================= + Author: devilteam.pl + WWW: http://devilteam.pl/...

Sonar 3.4.1 Cross Site Scripting

Sonar v.3.4.1 = XSS CWE-79 + Vendor info http://www.sonarsource.com/ Dork : intext:"Powered by SonarSource" ========================================================= + Author: devilteam.pl + WWW: http://devilteam.pl/ ========================================================= XSS:...

Sonar - Multiple Cross-Site Scripting Vulnerabilities

Sonar - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57982/info Sonar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...

Sonar - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57982/info Sonar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of th...