Show HN: A kind of looking glass for web abuse

1 point

2 years ago

It kind of occurs to me that maybe this would be generally useful to people with exposed web servers, so I've made it generally available at least for the moment. You should be able to hit it as often as once per hour without getting banned.

It would be better if other people offered the same looking glass to give a better global picture. I will be happy to get on a video call and help with the installs and setup, it's all on GitHub: https://github.com/m3047

I'd be perfectly happy with somebody putting a web interface in front of it, just reach out and let me know you're going to do it so that I can whitelist you and have contact info for advance notice of anything important. [Edit:] I should note that that server is not available from some cloud services for $reasons, so you really do need to reach out to me if you plan on hosting your service in the cloud.

    # dig @athena.m3047.net 'web_page\;\*.keys.redis.athena.m3047' txt +short | perl -ne 'm/;([^;,]+),40.;athena/ && print "$1\n";' | sort |  uniq
    ab2g
    ab2h
    alive.php
    apple-touch-icon.png
    apple-touch-icon-precomposed.png
    apply.cgi
    aws-secret.yaml
    check.js
    chitoge.php?chitoge
    config
    config.php
    connect.cgi
    .env
    env.backup
    .env.local
    .env.production
    .env.staging
    eval-stdin.php
    example.com/
    faspex/
    favicon.svg
    formlogin
    hetong.js
    index.cgi
    index.html
    index.php?file=tf2rghf.jpg
    index.php?lang=en
    info.php
    input
    license.txt
    login
    login.asp
    login.esp
    login?lang=en
    logon.html
    phpinfo
    _phpinfo.php
    phpinfo.php
    powershell
    reportserver
    routes
    sh
    shell.php
    teorema505?t=1
    web/
    wp404.php
    wp-config
    wp-json
    wp-login.php
    x.js

1 comment