I Put A Fake Email Server On The Internet 

I like it easy to follow

Second. :3 Early crew. Shalom. :3

It's good. Thanks. 🤝😅🤓😎

Oh yes! it is verry easy to follow with the video itself. I like this methodology

Good, Keep experimenting with this format and I like where this is going.

Look out for the big guy! Also, big guy, wouldn't you say it's a little presumptuous from John's part to say a "try it out yourself"? As if there IS any vulnerability or way of id'ing your hp there might be a breach and bleed? Bad actors still would like a random access to use for their own purposes.

Huge thanks joda32!!! :D

​@@somexneJohn set up a cloud computer... Even if It was compromised, who cares? That's like worrying about running a virus on a virtual machine...

@@fightme5543 Wrong. This machine could be involved in criminal activities under John's name. Also used as a C&C. Depending on the workings of the machine, he could even get charged more for the usage of the computer.

@@fightme5543 More than that, this is John's case. Other people could use and not sanitize or stop the machine after the use and worse.

:3 Early crew. Shalom. :3

Thanks so much Daniel!!!

i dont think gcp or aws charge for online traffic until you setup specific services, for a simple vm on cloud any provider worth 2cents wont charge for traffic

@@oksowhat I've only ever built a Honeypot in Azure as a side project and off the bat, it started charging for the hosting portion as well as the bandwidth. I was fortunate enough to be working for an MS partner meaning that I got the $200 per month to run Azure services. Does GCP and AWS run with the same model billing structures?

@@michaelk6702 I have only used azure to host a vm as a vscode server for a team project since I had student credit so I don't know where was I charged, but in gcp and AWS there is not charges for bandwidth until you use some services to manage it like load balancer. As far as I know, I have only built small projects on both

That works until you accidentally forgot to use set the custom port option on your SSH session.

Did you use Cowrie? That is my favorite

​@@CybersecPat actually Dockpot

grep your logs for xmlrpc.php .... then block all those trying to access it. Typically, the same bots - people are trying to access that and wp-login

I looked through my web server logs and some of the most common interesting paths have been WordPress related. Some look for backup directories, files related to vulnerable plugins and themes, xml-rpc or login page.

I have a WordPress installation that isn't even accessible through google or any other search engine, they found it purely by scanning hosts of my hosting provider. It's now 2pm on Jan 14 2024 and I already have 34 failed login attempts on my wp-login.php just today (attempts that come up as 403 in my server log)

It will be targeted basically the second you generate certificate for the domain. They will try to scan the site to gather data about vulnerable plugins and themes and ofc try to bruteforce the admin account since WP instance is much more interesting than some outlook form, because with simple vulnerability or just bruteforcing the admin account, you can run your own code on the server.

he did mention it... lol

At the top of the registration page, there is text that says "For tuition assistance, please click here", and then the minimum is $0 🙂

@@_JohnHammond thanks, im just blind😅

Why would you bother? Hackers will just be using already known tables of passwords you're only going to be reassembling that data again?

@@rob-890 what?

They're mostly just using well known passwords anyway. Though you could find some rather rare default credentials for cheap IoT manufacturers over something like Telnet.

IP/NFtables and UFW

or cloudflare zero trust tunnel

Most systems/sysadmins get password requirements all wrong, though it has improved. Ideally they would set a very high minimum length (say, 20 characters) a reasonable minimum entropy (say, at least 7 unique characters) and _allow whitespace_ . Then users can choose a phrase: "why should we care about security?" This is easy to remember and type-which means less likely to end up on a sticky note-but infeasible to brute-force. What's more typical? 10 characters, at least one number, one capital letter, one special character, no whitespace...great. Now you have a password that's difficult to remember and type, but _trivial_ to brute-force. I've even encountered one system that specified a _maximum_ length of 12 characters! I can't even...

@@hibob84110 characters with special symbols? Should take 5 years, it's not trivial. Totally randomized 10+ passwords are fine, the problems start when you use normal words with some numbers.

I have been editing his videos for over a year, now. :)

​@@nordgaren2358Props man! Great quality work & super efficient!

Thanks @fightme5543 ! RU-vid won't let me see your comment, but I see it on the channel. Appreciate the blessing! 🙏

Yes it can easily be done, I've just not had the motivation to do that :) log a ticket on the project and I'll dockerize it :)

In this case it is not spoofing a commercial website. It is spoofing a common product that many organizations deploy (well they did that in the past) plus he was hosting it on his own domain. No company was spoofed. But yes, picking an organizations actual site and cloning that can land you in hot water.

he is not spoofing a commercial site, he is spoofing the login page to his own server.