Posts

47 Day SSL.Certificates

Image
Preparing for 47-Day Certificate Maximum Term By Tim Callan lifted from  this  article on Dark Reading. Tim's bio and photo at the end 👇 First, IT teams need to carry out a comprehensive  SSL/TLS certificate  discovery process. Today's digital certificates are woven into the fabric of modern infrastructure. To ensure no certificate is left unmanaged, organizations should deploy advanced discovery tools that scan both internal and external networks. These tools must probe nonstandard ports and proprietary applications, as well as analyze TLS handshakes across all network segments. The goal is to create a continuously updated inventory reflecting every certificate in use, complete with metadata such as expiration dates, issuing authorities, key length, and cipher suite. This inventory must be maintained through automated, ongoing scans to detect new certificates as they are issued. With this level of visibility, IT teams can identify risks, plan renewals, an...

sevastopol.gov.ru OSINT analysis

Okay, I have analyzed the "Stolen Crimea-SpiderFoot.json" file containing the OSINT analysis of sevastopol.gov.ru. Here is a report based on the data within that file: OSINT Analysis Report: sevastopol.gov.ru This report details the findings from the provided OSINT analysis JSON file concerning the website sevastopol.gov.ru. 1. Network Architecture of sevastopol.gov.ru Primary IP Address: The main domain sevastopol.gov.ru and its primary subdomain www.sevastopol.gov.ru resolve to the IP address 213.59.161.38. Hosting Provider / ASN: This IP address belongs to AS59833, identified as SEVTELECOM-AS, owned by JSC Sevastopol Telekom. Geographical Location: The ASN owner address is listed as 15, General Petrov, 299011, Sevastopol, RUSSIAN FEDERATION. Urlscan.io results also geolocate the IP to RU (Russia) and UA (Ukraine). DuckDuckGo results categorize the site under "Federal cities of Russia", "Cities in Crimea", "Southern Federal District...

Counter Deception

Image
Taken from Counter Deception from DefCon 32 Tim Cross & Greg Conti talk. https://youtu.be/gHqDEMrqTjE?si=GfWtC5JReTqC5M_E

russianhighways.ru scan report

Nmap Scan Report - Scanned at Sat Mar 15 08:59:35 2025 Nmap Scan Report - Scanned at Sat Mar 15 08:59:35 2025 Scan Summary | camozon.ru (80.87.203.0) | unico-style.ru (80.87.203.1) | bekup.dialelectro.ru (80.87.203.2) | yris.fvds.ru (80.87.203.3) | 725000.ru (80.87.203.4) | gedichsa.fvds.ru (80.87.203.5) | v14.ru (80.87.203.6) | con-srv-rusedc.ispvds.com (80.87.203.8) | wapdomik.ru (80.87.203.10) | belsnab31.fvds.ru (80.87.203.12) | admin232.fvds.ru (80.87.203.13) | spravka-region.ru (80.87.203.14) | 2ivanivan9955.fvds.ru (80.87.203.15) | sorvemsia.ru (80.87.203.16) | promedia.su (80.87.203.17) | firstvds.ru (80.87.203.18) | estetika-art.com ...