
Originally Posted by
Evelyn
Had never heard of them before, did a quick search and found this:
Code:
https://94.23.196.197/.htaccess
https://redtopia.xyz/phpMyAdmin
3306/tcp open mysql
22/tcp open ssh
6001/tcp open X11:1
debug1: Authentications that can continue: publickey,password
^ for root
Guys did you take a proper look at Redtopia's security? "The better red"
is a fucking shitshow. Here's a taster: open ports 22 ssh, 3306 mysql,
6001 X11:1. A straight up fucking running instance of phpmyadamin on the
domain with no fail2ban from what it seems. You can get the .htaccess
and other nice things from the IP of the webserver.
Oh also HDVinnie the owner copied 12k users from blutopia into this
thing and is accepting donations on Patreon, where he himself is backing
other shit as well... Oh right I forgot there are open signups
Not having services unnecessarily listen on your WAN interface is a basic security measure... if you're going to check that place out, make sure it's with a disposable e-mail and a unique password, maybe a different IP too.
Bookmarks