[QUESTION] Brute forcing into a VPS

Crypt · 11-17-2013, 07:35 PM

(11-17-2013, 07:18 PM)Pens Wrote: LOLLOLOLOLOLOL

If you're talking about the fucking ms08 netapi exploit that every skid shows in "h0w to h4ck any cumputee with metasploitz" tutorials... I'll give you $500 if you find a computer in the wild that is vulnerable to it.

That's not what I was talking about at all. I know nothing will be vulnerable to that ancient module.

Dyme · 11-17-2013, 07:55 PM

(11-17-2013, 07:35 PM)Crypt Wrote: That's not what I was talking about at all. I know nothing will be vulnerable to that ancient module.

Could you then link me to the "samba" vulnerability you were talking about? I guarantee you that you won't be able to find that in the wild either.

Crypt · 11-17-2013, 08:12 PM

(11-17-2013, 07:55 PM)Pens Wrote: Could you then link me to the "samba" vulnerability you were talking about? I guarantee you that you won't be able to find that in the wild either.

Here's a post about it, https://isc.sans.edu/diary/Windows+7++Wi...ploit/7573

Here's a video on it http://www.youtube.com/watch?v=_0rLWy86VTM

tropic · 02-22-2014, 01:54 AM

Some VPS hosts set default passwords which idiots do not change. If you manage to obtain it (through brute-forcing or other methods), you might be able to own more vpses on the same /24.