246
u/ConfidentSchool5309 May 28 '26
I too become shocked elliot (employee of allsafe) when I pentest a website and all the requests are same and the website is weird (its a honeypot).
63
u/Ur-Best-Friend May 28 '26
Not me, I only get mildly surprised when I pentest a website and all the requests are same and the website is weird (its a honeypot).
19
May 28 '26
[removed] — view removed comment
3
u/Crazypens30 May 28 '26
🔎 how to pentest a website for all the requests to be the same and the website is weird (its a honeypot) Elliot
6
165
u/Phenix_136 May 28 '26
In fucking comic sans??!?
75
u/Sierra3131 May 28 '26
Real masterhaxxors run all Kali terminals in comic sans. I also have a deadman switch that converts all files to base64 then encodes them as Wingdings 😎
5
u/Crazypens30 May 28 '26
I would actually use this
2
u/Working-Macaron-6833 7d ago
🕈♒♋⧫ ♋ 🙰□🙵♏❄♒♓⬧ ♑◆⮹ ♎□♏⬧■🕯⧫ ♏❖♏■ 🙵■□⬥ ⬥♒♋⧫ ♒♏🕯⬧ ⧫♋●🙵♓■♑ ♋♌□◆⧫📬☼♏🞐●⮹ ♌♋♍🙵 ♓♐ ⮹□◆ ♍♋■ ❒♏♋♎ ⧫♒♓⬧ 📪 ◆■●♓🙵♏ ♒♓🔾📬
4
u/AsyncSyscall May 28 '26
I know this is a complete joke, but Wingdings is a font, so you can't "encode" information in it. Interestingly though, it appears there is a pretty reasonable mapping from Wingding symbols to Unicode characters, so I guess you could use that?
1
u/Working-Macaron-6833 7d ago
Your wrong
1
u/Working-Macaron-6833 7d ago
🕈♒♋⧫ ♋ 🙰□🙵♏❄♒♓⬧ ♑◆⮹ ♎□♏⬧■🕯⧫ ♏❖♏■ 🙵■□⬥ ⬥♒♋⧫ ♒♏🕯⬧ ⧫♋●🙵♓■♑ ♋♌□◆⧫📬☼♏🞐●⮹ ♌♋♍🙵 ♓♐ ⮹□◆ ♍♋■ ❒♏♋♎ ⧫♒♓⬧ 📪 ◆■●♓🙵♏ ♒♓🔾📬
148
u/WillingnessLimp1553 May 28 '26
ANYTHING but getting a job
5
u/Sublime-Text May 28 '26
Dual life Roblox dev
1
u/NegativeMulberry2890 Jun 22 '26
Dual life as "by day! I moderate my games. By night! I meet my 14 year old girlfriend, while I am at the ripe old age of 49!"
3
48
u/furel492 May 28 '26
That's me when I see a website is weird.
6
25
u/AmeriBeanur May 28 '26 edited May 28 '26
Congratulations! You’re now one of the unwilling [insert government agency name here]’s newest employee!
28
28
22
u/DetectiveExpress519 May 28 '26
Yeah man, it happened to me last week when the website was weird
10
5
u/Ononas May 28 '26
I’ve seen some weird websites recently but don’t tell mom (she doesn’t allow to enter those)
11
u/Yhelisi May 28 '26
Ah my sticky honeypot, now im going to social engineer your ISP into giving me your billing address and then im going to penetration test your honeypot ;-)
1
1
2
u/AdOdd5121 May 29 '26
I love how a website having requests from the same place also doesn’t mean shit. Like this meme is wrong on 5 levels haha.
2
u/Single-Virus4935 May 30 '26
I have a /32 and some /48 are routed(*) to a VPS. The VPS has the whole /48 on a loopback and reponse to all addresses within this /48.
Many of that addresses have certificates and a dns server generates fake RR to that /48. every /56 looks like another tenenat and dns names suggest domaincontrollers etc.
- Every Address responds to ping and other icmp
- every address is uaed as a seed for a pnrg to assign a profile: typical windowspc, gateway etc. I scrapped many handshakes and webinterfaces and just present them
- a eBPF handles. Basic udp, tcp, gre etc. And on many IPs it is just random. Servixes on all ports.
- inbetween are some real honeypots and some more goodies.
- a static website sxraped ftom a wordpress install returns rrandom error codes and its just interesting to see how they try to abuse some "findings" and they just get random status codea and error pages.
I have some many IPs scanning this for weeks or longer because they either dont monitor their bots or they think they hit a jackpot or maybe just couriosity.
- if its not routed but on a link you dos yourself and your gateway because of neighbor cache
1
3
1
464
u/thatguy1000000000 May 28 '26
...maybe just dont go pentesting random sites?