Help
RSS
API
Feed
Maltego
Contact
Domain > serverlost.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2010-06-20
217.172.180.167
(
ClassC
)
2024-08-31
178.254.1.114
(
ClassC
)
Port 443
HTTP/1.1 200 OKDate: Sat, 31 Aug 2024 00:42:16 GMTServer: Apache/2.4.29 (Ubuntu)Last-Modified: Tue, 16 Oct 2007 03:16:06 GMTETag: d0c-43c939b0ca980Accept-Ranges: bytesContent-Length: 3340Vary: Accept-EncodingContent-Type: text/html !DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN>html>head> meta http-equivcontent-type contenttext/html; charsetISO-8859-15> title>Welcome to grospolina.org !/title> meta http-equivContent-Type contenttext/html; charsetiso-8859-1> center>img srcimg/grospolina.gif>/center>/head>body stylebackground-color: rgb(255, 255, 255); color: rgb(0, 0, 0);>div styletext-align: center;>h1>GROSPOLINA.ORG/h1>br>/div>br>a hrefhttp://grospolina.org/projectsh2>New Projects/h2>/a>h2>Projects/h2>h3>honeyd: webmin.sh/h3>h4>Description:/h4>honeyd is a low-interaction-honeypot. Please visit http://honeyd.org.br>The script is based on apache.sh (by Fabian Bieker) and simulates a vulnerable webmin server.br>It sends /etc/passwd and /etc/shadow if requested. br>h4>Download:/h4>a hrefhttp://grospolina.org/honeyd_webmin.tar.gz>honeyd_webmin.tar.gz/a>h3>honeyd: webmin.sh - upgrade/h3>Due to unexpected hits i decided to release a new script .br>New: /etc/shells and /var/webmin/sessiondb.pagbr>h4>Download:/h4>a hrefhttp://grospolina.org/honeyd_webmin1.tar.gz>honeyd_webmin1.tar.gz/a>h3>honeyd: webmin.sh - upgrade2/h3>New: /session_login.cgi and /shell/index.cgibr>stripped images to reduce the number_of_requestsbr>b>ANY comments would be helpful... please write to nep ÄT grospolina D0t org/b>br>I still have not solved the problem how to handle the POST data.br>..may be you are able to push me up onto the right way :) thx.br>h4>Download:/h4>a hrefhttp://grospolina.org/honeyd_webmin2.tar.gz>webmin_1008070459.tar.gz/a>br>md5: 2e4022a9a55210671a75a60778944c15br>h3>nepenthes: symantec 06-10 addon/h3>h4>Description:/h4>nepenthes collects autonomously spreading malware. Please visit http://nepenthes.sf.net.br>The nep_sym_addon.tar.gz archive holds all files needed to implement sym06-10.br>The svn release at https://svn.mwcollect.org only binds to port 2967.br>This release binds to all ports mentioned in vuln-sav.conf.h4>Download:/h4>a hrefhttp://grospolina.org/nep_sym_addon.tar.gz>nep_sym_addon.tar.gz/a>h3>nepenthes: malformed URL port patch/h3>h4>Description:/h4>target : DownloadManager.cppbr>nepenthes cares about ports > 65535... but why ?br>A worm using this issue would not be downloaded by nepenthes br>This patch uses modulo to calculate the port.h4>Download:/h4>a hrefhttp://grospolina.org/DownloadManager.patch>DownloadManager.patch/a>h3>nepenthes: ignore 172 bytes hexdumph4>Description:/h4>target : Utilities.cppbr>nepenthes stores unknown requests in ./var/hexdumps as binarybr>All 172 bytes binaries are just logins (bruting or password list based)br>I was looking for a way to get rid of them.br>My solution adds a few lines below the zero length ignore into the ./nepenthes-core/src/Utilities.cpp br>h4>Download:/h4>a hrefhttp://grospolina.org/Utilities.patch>Utilities.patch/a>br>br>/body>foot stylebackground-color: rgb(255, 255, 255); color: rgb(0, 0, 0);>div styletext-align: center;>All patches or files are for educational purposes only.br>We had tested them but nobody is perfect ;).br>We will not instruct you how to patch or overwrite.br>/foot> /html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]