Identifying potential exposure following Log4j attack

This page summarizes the projects mentioned and recommended in the original post on /r/admincraft

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • reverse-ssh

    Statically-linked ssh server with reverse shell functionality for CTFs and such

  • Ok, instead of going to bed I got curious and looked a bit further, and, well, the executable is just this: https://github.com/Fahrj/reverse-ssh. I might rebuild it so that it outputs the commands instead of running them and see what happens…

  • masscan

    TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

  • OP already said this, but they are correct, it's actually fairly trivial to find machines running minecraft servers if they are open to the internet, with tools like masscan you can iterate over thousands of IP addresses in minutes.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts