Mass Scanning to protect the Masses

Ok, so it’s been a fun few Days. The past few days have been spent coding some tools to do Mass Bug Bounty tests etc while doing this I decided to poke around at the new or Year old Cisco SMI issue. The results are actually pretty odd, the fact that Cisco is reporting there to be only 130 k plus of these out there. Just based off my small tests of a few hundred k out of a few Billion IP Addresses I have found quite a lot of them it’s actually pretty scary how bad this is.

So, With the great services provided by https://onehostcloud.hosting I can say that I will return again on a monthly basis. Go grab Yourself an instance of Kali Pen Testing VPS now!!!!

Do us all a favor though, guard all scans or probes that will generate Abuse complaints with proxy chains. I also suggest You not use their services for bad, it is very hard to get a system that is as stable as this being a hobby coder and pen tester. Their systems run flawlessly and my tor scans over Zmap are some of the fastest results I have personally ever seen.

So this being said the services they provide have allowed me to generate enough valid scan data to actually get a competitive edge over allot of You not using them. Why do you ask?

Well, the speed of their networks, the fact the shit just works, and the custom tools I have written off of this data isn’t exactly stuff You can easily google for and have a canned Toolset. This type of service is critical for beginners like us to have an edge in the Bug Bounty trade. They are not offering me any services nor was I coerced into advertising for them. I am just speaking from a happy customers perspective and their services kick ass if they didn’t I would let You know :)

The reason I am performing these Scans are used to Find vulnerable systems and compare the IP addresses to any possible networks belonging to a system with a Bug Bounty Program. While scanning is usually frowned upon if You are not being malicious there should be no issues. My mod on Cisco’s tool

https://github.com/devcoinfet/smi_check_mod