Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

October 14, 2022

Detecting Microsoft Exchange Zero-day Vulnerabilities with the Security OSINT Tool

On September 30, 2022, Microsoft announced security updates for two zero-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019. This article covers how to use the security OSINT tool to find servers with these vulnerabilities and a case study of an…

Blog
Detecting Microsoft Exchange Zero-day Vulnerabilities with the Security OSINT Tool

October 11, 2022

IP Intelligence: How to Handle IP Addresses That Attempt to Bypass Anti-spam Solutions

To stop spam emails, it is common for companies to implement several anti-spam solutions, such as spam filters, in their mail servers. Nevertheless, there are many cases where anti-spam solutions are often bypassed. In order to bypass the anti-spam system, attackers use official…

Blog
IP Intelligence: How to Handle IP Addresses That Attempt to Bypass Anti-spam Solutions

October 7, 2022

How to Find Exposed SCADA Servers

SCADA (Supervisory Control and Data Acquisition) is a computer system that monitors sand controls industrial control systems. SCADA servers are likely to be a target of cyberterrorism because of their weak security. In this video, we will be showing you how to find exposed and…

Videos
How to Find Exposed SCADA Servers

October 5, 2022

Government Servers Hacked by the Unseen Cryptojackers

Recently, it was discovered that a South Korean government server was infected by malware in 2017 and used for cryptomining. However, the problem comes from the fact that this malware has been undiscovered for several years. The hacked equipment in question was installed to…

Blog
Government Servers Hacked by the Unseen Cryptojackers

September 30, 2022

How to Find Old WordPress Servers

Check out this tutorial on finding outdated WordPress webpages using the tech_stack filter. In this video, we talk about the vulnerabilities present in old WordPress versions, and how they can be used by hackers for malicious ends. ▶️ CIP: https://www.criminalip.io▶️ CIP…

Videos
How to Find Old WordPress Servers

September 30, 2022

Detect OpenVPN Vulnerability That Makes Paid VPNs Free

이 글은 구글 해킹 등의 OSINT 툴로 OpenVPN 취약점 탐지 방법 및 OVPN 파일 유출로 인해 유료 VPN을 무단으로 사용할 수 있는 보안 결함에 대해 다룬다. OpenVPN에 필수인 OVPN 파일 OVPN 파일은 OpenVPN 프로토콜을 사용하여 VPN을 연결할 때 필요한 설정 파일이다. 파일에는 VPN 서버 주소와 인증을 위해 사용하는 암호 키 등이 포함되어 있어, VPN을 시작하는 데에 매우 중요한 파일이다. 그렇기 때문에 OVPN 파일이 외부에 노출되는 것은 할당 받은 사용자가…

Blog
Detect OpenVPN Vulnerability That Makes Paid VPNs Free

September 27, 2022

[Criminal IP v1.2.11] 2022-09-27 Release Note

An update to Criminal IP v1.2.11 has been released. Major changes include: [Criminal IP v1.2.11] Release Notes Maintenance Period : 2022.09.27 06:00~08:00 AM (UTC) [New Feature] Restructuring Domain Search API Added /v1/domain/status/[id]: An API that allows you to check…

Release Note
[Criminal IP v1.2.11] 2022-09-27 Release Note

September 23, 2022

LockBit 3.0 Ransomware Case Study: A Huge Cybersecurity Risk

In this article, we will analyze LockBit 3.0 ransomware attack cases to show you how attacks similar to these cases can be prevented. What is LockBit 3.0 Ransomware? LockBit 3.0 (also known as LockBit Black) is ransomware created by the cybercrime syndicate LockBit. The first…

Blog
LockBit 3.0 Ransomware Case Study: A Huge Cybersecurity Risk

September 23, 2022

How to Find Expired SSL Certificat Websites

Tutorial on finding web pages with expired SSL certificates, using SSL _Expired filter.If a site owner missed renewal period and it expired, information entered in the browser may be exposed to potential hackers. Most of all, the vulnerability of the website’s security settings…

Videos
How to Find Expired SSL Certificat Websites

September 22, 2022

Google Hacking vs Criminal IP: Comparative Analysis of 2 filters

In this article, we compare and explain the search results and methods of Google Hacking’s intitle filter, which searches only sites with specific keywords in the title, and Criminal IP’s title filter. What is Google Hacking? Google Hacking is a service that uses Google Search…

Blog
Google Hacking vs Criminal IP: Comparative Analysis of 2 filters

September 20, 2022

[Criminal IP v1.2.8] 2022-09-20 Release Note

An update to Criminal IP v1.2.8 has been released. Major changes include: [Criminal IP v1.2.8] Release Notes Maintenance Period : 2022.09.20 06:00~08:00 AM (UTC) [New Change] Launch of Criminal IP’s Attack Surface Management Solution The new Attack Surface Management solution,…

Release Note
[Criminal IP v1.2.8] 2022-09-20 Release Note

September 16, 2022

Criminal IP Search 101 – How to Find Vulnerable Redis Commander Servers

Services such as Facebook, Instagram and Tumblr use Redis databases frequently. Therefore, it is important to know if your redis commander server is exposed to the open web. In this video, we’ll show you how these Redis commander servers are exposed on the internetand how to…

Videos
Criminal IP Search 101 – How to Find Vulnerable Redis Commander Servers

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US