Synchronise database
- Thread starter Bieke
- Start date
Friendly reminder that all the attacker needs is a vulnerability. Having your ports scanned for entry points does not require a virus inside your system, it just requires a few tools and techniques that can be carried out remotely. Since the vulnerabilities are widely available, the attacker only needs check if the port responds, identify the service running on it and attempt the exploitation, which is why systems need to be updated and patched frequently.
Another clarification, the websocket route proposed is not a timer or polling mechanism. It's a reactive technology that listens for requests and resolves them in real time. Similar to how the server where this website is hosted is responding to your browser when it hits this website's URL.
Another clarification, the websocket route proposed is not a timer or polling mechanism. It's a reactive technology that listens for requests and resolves them in real time. Similar to how the server where this website is hosted is responding to your browser when it hits this website's URL.
Gasman
Enthusiastic Amateur
- Local time
- Today, 05:09
- Joined
- Sep 21, 2011
- Messages
- 17,530
Yes, I remember GRC.com from years back, to test your exposure to the Internet.
This was when people were just being connected to the internet without any firewalls.
www.grc.com
This was when people were just being connected to the internet without any firewalls.
GRC | ShieldsUP! — Internet Vulnerability Profiling
GRC Internet Security Detection System
The website you cited has likely been testing this for years, but the principle remains as relevant today as it was then. Firewalls won’t protect you from vulnerable services running on your ports.This was when people were just being connected to the internet without any firewalls.
In fact, if you want to see this in action right away, rent any VPS service and check your logs, although I think you could see the attacks taking place in your computer with a tool like Wireshark too. In the case of the VPS, within minutes, if not seconds, you will be receiving all sorts of attacks. It's very educational for the variety of attacks you can learn about, so I suggest you try it to see it yourself.
You have to remember that the attacker does not want you to know they have access to your computer, because they may use it to mine crypto, perform DDoS attacks, serve as a proxy, send spam, etc. They may also monitor your activity, steal your data, etc. Also, tools have only gotten more sophisticated.
You have to remember that the attacker does not want you to know they have access to your computer, because they may use it to mine crypto, perform DDoS attacks, serve as a proxy, send spam, etc. They may also monitor your activity, steal your data, etc. Also, tools have only gotten more sophisticated.
The point is: remote code execution exists and you can take advantage of it to sync your databases.
Last edited:
Similar threads
