Not hate mail.

[Ekultek]

You realize you just opened Pandora’s box on every able body in the world right? I love it, keep it up man.

[NullArray]

Lol thanks. Version 2 is going to be a team effort. Feel free to contribute if you'd like 👍

[Ekultek]

Lol I’ll see what I can do, question about it though. Can you set proxies for the searches, haven’t had a chance to actually look at it yet.

…

On Feb 2, 2018, at 5:15 PM, NullArray ***@***.***> wrote: Lol thanks. Version 2 is going to be a team effort. Feel free to contribute if you'd like 👍 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[NullArray]

The way in which the hosts are gathered is through Shodan. Using shodan.io to find internet connected devices is not illegal so i don't know why you would want to proxy the connection to the search engine.

[Ekultek]

Fair enough, thank you.

…

On Feb 2, 2018, at 5:32 PM, NullArray ***@***.***> wrote: The way in which the hosts are gathered is through Shodan. Using shodan.io to find internet connected devices is not illegal so i don't know why you would want to proxy the connection to the search engine. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[ageis]

FWIW after reading the reply here I located a passage in a book where Shodan's founder notes it's "not an anonymous service" and expresses approval of law enforcement action; one of the authors has worked extensively in government. This code is not illegal in itself and I'm not for such activity but SOCKS5 and/or Tor support would not be that hard.

Also congrats on earning the attention of the White House. :)

[NullArray]

Thank you for looking that information up @Aegis and yeah lol, i was pretty surprised someone from the White House was even commenting on this. AutoSploit really went viral.

Also, @Ekultek i think it should work fine through proxychains yeah. Haven't personally tested it, and it might be possible to add proxy support natively, if that's not a bit overkill.

[kimocoder]

AutoSploit is also mentioned over here - Digi.no is a Norwegian tech publishing news site. They raise concern that more users would be able to perform attacks. Great work, would be fun to test drive it. Keep up the good work.

[Ekultek]

People are ridiculous. How about instead of bashing the creator of it, they say thanks for showing us where we have issues I'm gonna help you develop this thing into a security experts fucking nightmare because they deserve it.

[Ekultek]

You also made it on securitybuzz, congratulations man, you're famous

[NullArray]

Lol, i suppose i am. Not quite sure whether this is a good or a bad thing yet.

[Ekultek]

Gotta respect this man for seeing the real problem:

On the other hand, Chris Roberts, chief security architect at Acalvio states:

” The kids are not more dangerous. They already were dangerous. We’ve simply given them a newer, simpler, shinier way to exploit everything that’s broken. Maybe we should fix the ROOT problem”.

[NullArray]

Interestingly Rapid7 had something to say about this as well. I thought their assessment was reasonable.

On Random Shell Generators by Rapid7

Also, i like that they updated the article to include the fact that i intend to have functionality to load a single host or custom list in the new version. The reason why i am adding it is to make the tool more precise and enhance it's utility no matter the engagement, Shodan lookup will remain as an option as well though.

[Ekultek]

@NullArray Rapid7 is usually pretty good at these kinds of things. I have massive respect for their teams and their company.

[navanchauhan]

It’s really easy to use tor, check my Mjolnir repo ( it’s a DoS tool :p)

[NullArray]

Hey @Ekultek got a way of contacting you via IM? Or something similar, i'd like to discuss some things with you. Perhaps add you as a collaborator with push/write access to the AutoSploit repo as well. Since you have been contributing so much. I'd love to get in touch, if you'd be interested.