+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Scanned 100% of the Internet for port 5900, results! (/showthread.php?tid=5742942)
Scanned 100% of the Internet for port 5900, results! - Carbanak - Oct 25, 2017
I've performed a mass scan of the Internet for IP addresses that have port 5900 (VNC) open.
So you can parse this data into any brute forcing tool you wish and enjoy the spoils. Yes there are some IP addresses with no auth.
https://mega.nz/#!8qBX0KCb!ddEz1_QqvxFILRK5IcS_3IwbGqEPY1tOd3eM82R6RDM
🤝
RE: Scanned 100% of the Internet for port 5900, results! - Faith Connors - Oct 25, 2017
an interesting one would be ports 8080 or 3128 or something, default proxy ports. could generate yourself a massive proxy list.
or 3389 for RDPs.
RE: Scanned 100% of the Internet for port 5900, results! - Charger - Oct 25, 2017
How did you manage to scan without your vps provider getting involved?
RE: Scanned 100% of the Internet for port 5900, results! - Carbanak - Oct 25, 2017
(Oct 25, 2017 01:37 PM)Charger Wrote: How did you manage to scan without your vps provider getting involved?
Use a VPS provider that ignores abuse reports, use the correct scanning setup and don't scan every single port on the internet.
(Oct 25, 2017 01:35 PM)Faith Connors Wrote: an interesting one would be ports 8080 or 3128 or something, default proxy ports. could generate yourself a massive proxy list.
or 3389 for RDPs.
For my next scan I will try and see if I can get socks5 and RDP IP addresses.