Random Robbie

Hunting vulns. Exploits are real. Opinions are yours. Blame yourself, not me. Anything posted here is on you not me. #LFC

[Gathin (Ø,G) @gathint]

CleanYourTV v2.7 is out 📺

What's new:
• 35 new TVs from 9 new brands
• Wallpapers that change with the time of day
• Two new themes
• Game controllers that just work
• Safer defaults that protect your TV

230 PRs merged from 122 contributors since the last release 🙏

[Random Robbie @Random_Robbie]

@log4j Best time to get something like https://t.co/L0OFf0vMQn I'm sure root in the TV wouldn't take long

[Random Robbie @Random_Robbie]

@DanNeidle Got a feeling if he's in the US you could report him to the IRS and that would be fun

[Random Robbie @Random_Robbie]

@Bedrovelsen Thank you!!

[Random Robbie @Random_Robbie]

Any one who does #3dprinting has any one found a good #AI that will take an image and make a good cad design

[Random Robbie @Random_Robbie]

A camera watching a city street in the small hours - bus lane, signals, nobody around - streams the scene to anyone who knows where to look. `rtsp has_screenshot:true -tag:honeypot` #shodansafari

[Random Robbie @Random_Robbie]

A laundry-room building controller is wide open - logged in as guest: BACnet, OPC and FTP services up, IEC61131 logic running, 503 days of uptime. http.title:"Laundry" -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

A 2002-era AXIS 2100 camera is still streaming a live bird-cage feed to the open web - on a page still labeled "Demo web". http.html:"axis-cgi" -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

A police station's interior camera is wide open over RTSP: the server rack and offices, watchable by anyone - on a DVR whose clock says the year 2091. rtsp has_screenshot:true -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

A Brazilian city's panoramic camera streams the whole hillside town to anyone - mountains, rooftops and traffic, live. rtsp has_screenshot:true country:BR -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

@Nutritionist_AP Vnc so there are hacks for it

[Random Robbie @Random_Robbie]

An Italian wind turbine control HMI is wide open over VNC: "verifying wind speed", line voltage 409 V, gearbox at 27.9C - 634 MWh produced on this tower. port:5900 has_screenshot:true -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

has any one managed to pop a F5 yet they use php don't they?

[Random Robbie @Random_Robbie]

pink bally

[Random Robbie @Random_Robbie]

when you have github repo keys to a app with 5 million downloads and no where to report it to.

[Random Robbie @Random_Robbie]

@Bedrovelsen Cheers I'll keep a note!

[Random Robbie @Random_Robbie]

A water-treatment Aqua Centre HMI is wide open over VNC: reservoirs, dosing valves, inlet pumps - SYSTEM HEALTHY, with start-cycle and switch-off buttons on screen. port:5900 has_screenshot:true -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

Flights are a right ball ache. I can get to a place with in a reasonable amount of time with 1 stop but getting back god for bid I've gotta wait a 5 hour layover or 4 connections.

[Random Robbie @Random_Robbie]

A Turkish greenhouse automation dashboard is wide open over VNC: 12.5C and 78% humidity inside, four irrigation sectors - one armed and running. port:5900 has_screenshot:true country:TR -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

A kiwi-orchard irrigation valve controller is wide open in Turkey: valve closed, MANUEL mode armed, open/close/stop buttons live. http.html:"webvisu" country:TR -tag:honeypot #shodansafari

[Random Robbie @Random_Robbie]

@ozhakikiburaky @grok does my description not match the image?

[Random Robbie @Random_Robbie]

A Turkish power plant's production dashboard is open over VNC: 71,854 MWh lifetime, units at 3,031 kW, net sales 1,537 kW live. port:5900 has_screenshot:true -tag:honeypot #shodansafari