#punkspider

[tilos-tagebuch]

A Controversial Tool Calls Out Thousands of Hackable Websites

PunkSpider is back, and crawling hundreds of millions of sites for vulnerabilities.

PunkSpider ist im Wesentlichen eine Suchmaschine, die ständig das gesamte Web crawlt. Sie identifiziert automatisch hackbare Schwachstellen auf Websites und ermöglicht es jedem, diese Ergebnisse zu durchsuchen, um Websites zu finden, die für alles mögliche anfällig sind... "Das Tool ist voller guter Absichten - diese Schwachstellen führen zu vielen realen Problemen, Ransomware ist eines davon, und die Veröffentlichung kann die Administratoren dazu veranlassen, sie zu beheben. Wir empfehlen es jedoch nicht!" - Electronic Frontier Foundation

[iicybersecurity]

PunkSPIDER, the crawler that scanned the Dark Web

PunkSPIDER, the crawler that scanned the Dark Web

Security experts developed their PunkSPIDER, a Tor crawler, that already scanned more than 7000 domains and discovered numerous vulnerabilities. We have discussed several times about the Tor anonymizer network and the way it is exploited by criminal crews to sell any kind of illegal product and service.

Last week, an automated scanner dubbed PunkSPIDER was launched in the Tor network to uncover…

View On WordPress

[ecstaticsec]

Self-defined as "a global web application vulnerability search engine" PunkSpider is sort of like a Shodan for web vulns. But not really. But kind of. I played around with the app a bit last year but, the recent maturity has certainly got my attention again. I caught some of the demos at the end of the SchmooCon 2014 LiveStream and had a some lulz at the VNC pwnage. #PunkSpider hyperiongray​

Oh and just a heads up, unless enough people harass DotSlashPunk on Twitter, the PunkSpider webapp does not scan .gov and .mil TLDs. You'll have to setup your own Hadoop cluster and install PunkScan for that.

Only one question remains: