Discover and read the best of Twitter Threads about #threathuning
Most recents (1)
1/ Playing around with #manjusaka, as reported by @TalosSecurity [1].
Following are some insights and potential #ThreatHuning tips and ideas. 🧵
#CyberSecurity @b3ard3dav3ng3r
Following are some insights and potential #ThreatHuning tips and ideas. 🧵
#CyberSecurity @b3ard3dav3ng3r
2/ After starting the ELF binary (a reduced version is publicly available on GitHub [2]), the login credentials are printed out (username: manjusaka, PW: b3e..), and the port (3200) on which the panel is accessible.
3/ The password is different for each instance of manjusaka.
This mechanism prevents the use of default passwords in case scanners would find the login panel.
This mechanism prevents the use of default passwords in case scanners would find the login panel.
