BlackArch Reviews

Shodan Reviews

BlackArch mentions (14)

• Witchcraft

  I prefer the black arch logo over the red version. Source: about 1 year ago

• Just started learning what is the better OS?

  Use ubuntu or debian until you get comfortable. I recommend at lest doing this once when you have time and a free machine, it will teach you a lot. Eventually you'll enjoy Slack and Arch installs a lot more than ubuntu and debain and mb BSD for some machines like your own encrypted cloud. Kali is just preloaded with tools for pentesting, you can install those tools on any machine, the ditro of linux is... Source: over 1 year ago

• Black Arch

  Black Arch for serious pen testers not for posers who run Kali as a daily driver. Source: over 1 year ago

• how do I add penetration tools in vanilla arch

  If you want to jump ship, consider https://blackarch.org/ but don't come here asking for help (and given their install instructions, you might very well need assistance). Source: about 2 years ago

• Protip: Use Wikipedia to find the proper download links for distros and software.

  There is also blackarch.org and blackarch.io, I really wonder if those isos cotain malware in some sort. Its funny that this tactic is even used on linux distros. Source: over 2 years ago

Shodan mentions (92)

• Introducing OSINT Template Engine: An open source OSINT Tool.

  Transform OSINT sources such as shodan, bgpview & urlscan into templates which you can use to query & store any and each of the API endpoints they provide. Source: 11 months ago

• Some outgoing ports (e.g, port 22) are blocked

  I'm a little surprised you're asking this but as you don't know - if you set the rulebase correctly, you won't get hammered by "public". A lot of people (of course not people here) don't do that which is why shodan.io is full of servers with SSH exposed to the world. Source: 11 months ago

• Does anyone want to vet this job opportunity?

  Eh, request a full demo before signing anything. If they make you buy before you can try, move on. Just be advised that data they collect from your site may be used in a database that puts a target on your back. Similar to how shodan.io works. I would probe them on how they handle customer data and if data is shared, partitioned, or isolated to ensure safety from a platform leak. They want to be a security... Source: 11 months ago

• Security issue or coincidence?

  My network is being hit by China and Russia many times per hour. Make sure your firewall is up-to-date and not have any services available on the Internet (WAN). Look at shodan.io which shows you _everything_ is searched on the Internet. Source: 12 months ago

• Onion sites crawling: Weird mass "HTTP/1.1 200 " HTTP status line returning?

  In the cases of nginx or apache, I suspect they may be acting as proxies to some backend that also chooses not to send a reason phrase back. Searching for "Reason Phrase" yields a number of bug reports/frameworks that may omit it, and shodan.io shows apache tomcat and a few other services/software that omit the code as well. Source: about 1 year ago