SHA2017 Wiki - User contributions [en]

Internet-wide Scanning

2017-08-07T18:17:02Z

Hanno: /* HTTP Scans Linklist */

== Internet-wide Scans @ SHA2017 ==
=== General Information ===
We're doing live internet-wide scans utilising the available bandwidth and peerings that SHA2017 will provide. We have a machine on-site that can also be accesses remotely and a workshop on the 7th (may change) regarding these scans and the topic in general. You may participate and submit scans. Please do this as described in the GitHub document below (https://gist.github.com/azet/54862407b7af1c2813e590ead83f7553)!

''We're setting up infrastructure to utilize the available bandwidth at the SHA2017 hacker camp in the Netherlands. Participation is more than welcome! This doesn't mean you have to be at the camp physically -- you may suggest scanning proposals/ideas (see below) & do your research remotely via ssh(1) or have someone implement and run your idea at the camp. There will be a workshop on internet-wide scanning - we'll present our results and teach willing participants what we know, have learned scanning the internet in the past, from others and during the camp. We will also let the participants run their own scans -- if we feel they're valuable, ethical and non-disruptive. Full attribution (professional, academic & otherwise) will go to the original authors of ideas and implementers of scans run during SHA2017 and developed at the mentioned workshop! We should not even have to mention this fact - as this should be the norm (hey there, academia!).'

=== Participate & Submit Scans ===
More information and participation via this GitHub document (take a look at the comment-section as well): https://gist.github.com/azet/54862407b7af1c2813e590ead83f7553

=== Ongoing Scans (not updated in real time!) ===

RoCEv2_started-Sat,_05_Aug_2017_22:51:25_+0000
SCTP_many_ports_started-Sat,_05_Aug_2017_23:07:56_+0000
chargen-p19-auth:BenBE_started-Sat,_05_Aug_2017_20:50:45_+0000
dns_started-Sat,_05_Aug_2017_21:01:17_+0000
elasticsearch-9300-cluster_started-Sat,_05_Aug_2017_20:23:32_+0000
elasticsearch_started-Sun,_06_Aug_2017_15:33:34_+0000
ftp_started-Sat,_05_Aug_2017_03:40:55_+0000
gprs_tunneling_started-Sun,_06_Aug_2017_15:27:23_+0000
http_started-Sat,_05_Aug_2017_02:02:50_+0000
https_2_started-Sat,_05_Aug_2017_02:49:55_+0000
https_mass_started-Sat,_05_Aug_2017_13:08:08_+0000
https_padding_oracles_started-Sat,_05_Aug_2017_22:42:30_+0000
https_started-Sat,_05_Aug_2017_01:50:36_+0000
iwarp_started-Sat,_05_Aug_2017_22:49:36_+0000
pop3_started-Sat,_05_Aug_2017_22:39:19_+0000
pop3s_started-Sun,_06_Aug_2017_11:43:55_+0000
sip-many-ports_started-Sun,_06_Aug_2017_15:45:06_+0000
smtp_started-Sun,_06_Aug_2017_15:43:28_+0000
smtps_port-25-Sun,_06_Aug_2017_15:37:41_+0000
smtps_port-465_started-Sun,_06_Aug_2017_15:40:19_+0000
smtps_port-587_started-Sun,_06_Aug_2017_15:42:23_+0000
snmp_started-Sat,_05_Aug_2017_22:58:45_+0000
ssh_started-Sun,_06_Aug_2017_15:29:52_+0000
syslog_started-Sat,_05_Aug_2017_22:44:06_+0000
upnp_ssdp_started-Sun,_06_Aug_2017_15:15:47_+0000
vnc_started-Sat,_05_Aug_2017_23:04:18_+0000
xmpp_started-Sat,_05_Aug_2017_22:53:47_+0000

=== HTTP Scans Linklist ===

* https://en.internetwache.org/dont-publicly-expose-git-or-how-we-downloaded-your-websites-sourcecode-an-analysis-of-alexas-1m-28-07-2015/
* https://blog.hboeck.de/archives/887-Dont-leave-Coredumps-on-Web-Servers.html
* http://www.zeit.de/digital/datenschutz/2017-07/customer-data-how-2000-unsecured-databases-landed-online
* https://www.golem.de/news/https-private-keys-on-web-servers-1707-128862.html
* https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html
* https://www.golem.de/news/certificate-transparency-hacking-web-applications-before-they-are-installed-1707-129172.html
* https://blog.sucuri.net/2012/11/psa-sftpftp-password-exposure-via-sftp-config-json.html
* https://www.cnet.com/news/apache-security-quotleak-quot-noted-with-dsstore-files/

=== Emergencies ===
If there are any '''real''' emergencies ('''network issues, abuse inquiries, et cetera''') you may get in contact with "azet" by the following means:

''@a_z_e_t'' (Twitter)

''shascan@azet.org'' (Mail)

''azet'' (IRC - OFTC, Freenode)

''azet@jabber.ccc.de'' (Jabber/XMPP)

Internet-wide Scanning

2017-08-07T18:16:16Z

Hanno: add some links about http scanning

== Internet-wide Scans @ SHA2017 ==
=== General Information ===
We're doing live internet-wide scans utilising the available bandwidth and peerings that SHA2017 will provide. We have a machine on-site that can also be accesses remotely and a workshop on the 7th (may change) regarding these scans and the topic in general. You may participate and submit scans. Please do this as described in the GitHub document below (https://gist.github.com/azet/54862407b7af1c2813e590ead83f7553)!

''We're setting up infrastructure to utilize the available bandwidth at the SHA2017 hacker camp in the Netherlands. Participation is more than welcome! This doesn't mean you have to be at the camp physically -- you may suggest scanning proposals/ideas (see below) & do your research remotely via ssh(1) or have someone implement and run your idea at the camp. There will be a workshop on internet-wide scanning - we'll present our results and teach willing participants what we know, have learned scanning the internet in the past, from others and during the camp. We will also let the participants run their own scans -- if we feel they're valuable, ethical and non-disruptive. Full attribution (professional, academic & otherwise) will go to the original authors of ideas and implementers of scans run during SHA2017 and developed at the mentioned workshop! We should not even have to mention this fact - as this should be the norm (hey there, academia!).'

=== Participate & Submit Scans ===
More information and participation via this GitHub document (take a look at the comment-section as well): https://gist.github.com/azet/54862407b7af1c2813e590ead83f7553

=== Ongoing Scans (not updated in real time!) ===

RoCEv2_started-Sat,_05_Aug_2017_22:51:25_+0000
SCTP_many_ports_started-Sat,_05_Aug_2017_23:07:56_+0000
chargen-p19-auth:BenBE_started-Sat,_05_Aug_2017_20:50:45_+0000
dns_started-Sat,_05_Aug_2017_21:01:17_+0000
elasticsearch-9300-cluster_started-Sat,_05_Aug_2017_20:23:32_+0000
elasticsearch_started-Sun,_06_Aug_2017_15:33:34_+0000
ftp_started-Sat,_05_Aug_2017_03:40:55_+0000
gprs_tunneling_started-Sun,_06_Aug_2017_15:27:23_+0000
http_started-Sat,_05_Aug_2017_02:02:50_+0000
https_2_started-Sat,_05_Aug_2017_02:49:55_+0000
https_mass_started-Sat,_05_Aug_2017_13:08:08_+0000
https_padding_oracles_started-Sat,_05_Aug_2017_22:42:30_+0000
https_started-Sat,_05_Aug_2017_01:50:36_+0000
iwarp_started-Sat,_05_Aug_2017_22:49:36_+0000
pop3_started-Sat,_05_Aug_2017_22:39:19_+0000
pop3s_started-Sun,_06_Aug_2017_11:43:55_+0000
sip-many-ports_started-Sun,_06_Aug_2017_15:45:06_+0000
smtp_started-Sun,_06_Aug_2017_15:43:28_+0000
smtps_port-25-Sun,_06_Aug_2017_15:37:41_+0000
smtps_port-465_started-Sun,_06_Aug_2017_15:40:19_+0000
smtps_port-587_started-Sun,_06_Aug_2017_15:42:23_+0000
snmp_started-Sat,_05_Aug_2017_22:58:45_+0000
ssh_started-Sun,_06_Aug_2017_15:29:52_+0000
syslog_started-Sat,_05_Aug_2017_22:44:06_+0000
upnp_ssdp_started-Sun,_06_Aug_2017_15:15:47_+0000
vnc_started-Sat,_05_Aug_2017_23:04:18_+0000
xmpp_started-Sat,_05_Aug_2017_22:53:47_+0000

=== HTTP Scans Linklist ===

* https://en.internetwache.org/dont-publicly-expose-git-or-how-we-downloaded-your-websites-sourcecode-an-analysis-of-alexas-1m-28-07-2015/
* https://blog.hboeck.de/archives/887-Dont-leave-Coredumps-on-Web-Servers.html
* http://www.zeit.de/digital/datenschutz/2017-07/customer-data-how-2000-unsecured-databases-landed-online
* https://www.golem.de/news/https-private-keys-on-web-servers-1707-128862.html
* https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html
* https://blog.sucuri.net/2012/11/psa-sftpftp-password-exposure-via-sftp-config-json.html
* https://www.cnet.com/news/apache-security-quotleak-quot-noted-with-dsstore-files/

=== Emergencies ===
If there are any '''real''' emergencies ('''network issues, abuse inquiries, et cetera''') you may get in contact with "azet" by the following means:

''@a_z_e_t'' (Twitter)

''shascan@azet.org'' (Mail)

''azet'' (IRC - OFTC, Freenode)

''azet@jabber.ccc.de'' (Jabber/XMPP)

Ticket Exchange

2017-08-02T05:23:40Z

Hanno: /* Ticket offers */

You have a ticket that you want to sell again, say, because you can't make it to the camp?<br />
Searching for a ticket with payment variants that are not offered in the ticket shop?

This is site is dedicated for swapping spare tickets between people.

Note that there are still tickets to buy in the [[Tickets|official ticket store]]!

<div style="background: bisque; border: 3px solid firebrick; padding: 1ex 1.5ex;">
This page is purely a visitor initiative. It is neither maintained nor supervised by the camp organization!<br />
Be warned that ticket selling/buying comes at a high fraud risk! Be sure to establish trust with the person you're buying tickets from!
</div>

== Selling procedure ==
Selling your ticket is just fine. We can invalidate the old ID and generate a new one. Send an e-mail to tickets@sha2017.org

==Ticket offers==
{|class="wikitable"
|-
!Name
!Contact
!Amount
!Comment
|-
|Hanno
|hanno@hboeck.de
|1 standard ticket for 150 EUR
|bought for someone else who won't come
|-
| Jogiwan
| joerg.wangemann@gmx.de
| I am giving away: 1 standard ticket for 150 EUR or a donation to an Charity/Aid Organisation.
| Unforeseen urgend matters.
|-
| Sandra
| inwendig@mailbox.org
| I am giving away: 1 standard ticket + 1 young hacker ticket (born after 3-8-1999) + 1 young hacker ticket (born after 3-8-2005) - for a self written poem or story or an interesting private lecture on whatever.
| Don't ask.
|-
| [[User:xuio]]
| moritz@hoffmail.me
| 1 standard ticket, 145€. IBAN, Paypal or ETH.
| I have to work :(
|-
| [[User:FMuenzner]]
| Frank.Muenzner@fpem.de
| 2 Standard Tickets for 140€ each, 1 Parking Ticket eventually. Bank Transfer or Paypal accepted
| Tickets is for members of family spread over the world, to realise a small meeting,but some can't come. Ticket initially buyed for ca.280€
|-
| [[User:toresbe]]
| toresbe@gmail.com
| 2 standard tickets, 210€ each. IBAN or Paypal.
| No-good cancelling friends.
|-
| [[User:stauffy]]
| benjamin.horn@posteo.de
| 1 Standard Ticket for 155€. Bank transfer or Paypal accepted
| I can't make it.
|-
|-
| [[User:yass]]
| yass@mailbox.org
| 1 Standard Ticket for 210€, Bitcoin, IBAN(Bank transfer), Paypal accepted
| Secound ticket for my brother. But he can't go.
|-
| DigitalHuman
| vangelier@hotmail.com
| 1 Standard Ticket for 200 EUR. Bitcoin, Paypal, IBAN(Bank transfer) accepted
| I have bought my ticket but it seems I had 2 events planned in the same week.
|-
|-
| mortzel
| mortzel@0x2a.it
| 1 Standard Ticket with T-Short Men M for 250 EUR. Bitcoin accepted
| I have bought my ticket too early, now I'm going to have trouble going to the camp.
|-
| lucas
| punkt@ctdo.de
| 2 Standard Ticket for 220-250 EUR.
| I bought the tickets to early and now i can't make it.
|-
| skewi
| skewi@mailbox.org
| 1 Standard Ticket for 210 EUR.
| Due work reschedule i can't make it, like to sell this ticket.
|-
| da_waschtl
| dontspam@posteo.de
| 1 Standard Ticket for 250 EUR. Bitcoin accepted
| Changed my job, now I don't get off... damn :/
|-
| Bruno
| bruno.mphx2@gmail.com
| Kartent – Tent + 2x Sleeping package for 125 EUR
| Decided not to camp
|-
| Julian
| julianbrown99@gmail.com
| 1 Standard Ticket plus 1 Parking Ticket for 50 EUR ono.
| Can't make it due to other stuff coming up.
|-
| dirk
| sha2017exchange@fidocon.de
| 2 Standard Tickets for 200 EUR each (maybe less).
| Ordered two tickets for colleges, unfortunately they can't participate. Being now near SHA, Cash preferred.
|-
| Gieg
| sha2017@timewasters.nl
| 1 Parking Ticket (no entrance, only parking). €30?
| Coming with a camper instead of a car.
|-
| <s>Bas Vermeulen></s>
| <s>bas.vermeulen@blackstar.nl</s>
| <s>2 x Kartent for 45 EUR. IBAN or PayPal.</s>
| <s>Ordered the Kartents, but decided to buy an actual tent later.</s>
|-
| Sasja
| sasja.ws@gmail.com
| 2 Standard Tickets for 150 EUR each. (bank transfer, bitcoin, paypal, cash, ...)
| Contact hackerspace.ghent in case you want to check my trustworthiness.
|-
| [[User:flamsmark|Tom Lowenthal]]
| sha2017@tomlowenthal.com
| One standard ticket for $300 or €265.
| No longer able to attend. Payment method negotiable.
|-
| Bcn
| shaexchange@mortemale.org
| One standard ticket for 150-200€, One M tshirt 20€. Paypal or others at need.
| I can't, it's summer.
|-
| Ewan
| sha@ewanp.com
| Two standard tickets + car parking 475€, Paypal or IBAN.
| Gutted not to be attending but have to help with an event in the UK. Would very much appreciate a badge after the event.
|-
| Paul
| pklingberg@gmail.com
| Standard Ticket, 150€, Paypal or IBAN.
| Can't make it.
|-
| coco
| camp@cocoswelt.de
| One standard ticket for 250€, one Female-S shirt 25€. Paypal or IBAN.
| Decided to attend a different camp.
|-
| <s>hobbyqs</s>
| <s>hobby-querschnitt (at) posteo.de</s>
| <s>1 Standard Ticket for 250 EUR., T-Shirt XL, Hoodie XL & Camper place total 332,50 - IBAN(Bank transfer) accepted</s>
| <s>I have bought my ticket but we´ll have a family event in the same week.</s>
|-
| z
| sha2017@secretlabs.de
| 1 Standard Ticket for 250 EUR. Bitcoin, zcash or IBAN
| Can't make it.
|-
| DrS
| cz@amateurengineer.com
| One Standard Ticket for 250 EUR. BTC or similar, IBAN or Paypal
| one of our villagers can't make it
|-
| Kim
| [https://www.ticketswap.nl/listing/sha2017/1413549/32c4fd760e ticketswap]
| One Standard Ticket + Male shirt size S for 265 EUR (excluding ticketswap service fees). Paypal, credit card, iDEAL, Mistercash, Sofort, KBC, Belfius, GiroPay.
| Changed plans
|-
| marc
| masc2511@icloud.com
| 2 standard tickets, 1 young hacker ticket, 1 baby ticket, 1 parking, 1 kartent, 1 t-shirt xl, for 500 EUR - IBAN, paypal, cash
| family business
|-
| <s>[[User:Bitlair.nl-kartoffel]]</s>
| <s>kartoffel(at)sha2017.org</s>
| <s>1 parking ticket, t.e.a.b. (open for offers) - IBAN, cash</s>
| <s>don't have a car any more :(</s>
|-
| [[User:jabdoa]]
| gone
| <s>1 normal ticket for 50€ - IBAN, cash
| cannot go because of girlfriend :-(</s>
|-
| [[User:RbN]]
| r.b.n@riseup.net
| 2-for-1, 2 std tickets to sell for 125€ each - IBAN, cash
| friends cannot come :-(
|-
|}

==Ticket requests==
Note that there are still tickets to buy in the [[Tickets|official ticket store]].
{|class="wikitable"
|-
!Name
!Contact
!Amount
!Plead
|-
| esbjerg
| h0001@xbsd.net
| EUR 48
|Looking for a hoodie mens size L
|-
|}