Spartech Software - SparTech Software

Common network ports (port number, service name and protocol with description).

Common ports Port numberService nameTransport protocolDescription7EchoTCP, UDPEcho service19CHARGENTCP, UDPCharacter Generator Protocol, has severe vulnerabilities and thus is rarely used nowadays20FTP-dataTCP, SCTPFile Transfer Protocol data transfer21FTPTCP, UDP, SCTPFile Transfer Protocol command…

Spartech Software June 7, 2025

Notable Vulnerabilities

Linux Dirty Pipe

In Linux, “dirty” refers to a page waiting for a disk write (page cache writes to disk whenever the page becomes “dirty”). The Linux Dirty Pipe vuln (CVE-2022-0847) affects all…

Spartech Software June 7, 2025

Cybersecurity Defense

How to get the latest ransomware demands from Ransomwarewatch

Using ransomwarewatch commands Ransomwarewatch is a github project that scans and stores ransomware data from the dark web. It has a CLI interface you can use to query the database.…

Spartech Software June 7, 2025

Cybersecurity Defense

All about passwords – the good, the bad, and the stupid.

The worst passwords in the world In the worst passwords list, you might find it horrifying that many people even use qwerty or 123456, which is quite funny. Others use their own name or…

Spartech Software June 7, 2025

Scanning and Analysis

FTP hacking

About FTP In an FTP connection, two channels are opened. First, the client and server establish a control channel through TCP port 21. The client sends commands to the server, and…

Spartech Software June 7, 2025

Encryption

How to generate PGP keys

How to generate PGP keys using GPG on Linux The GNU Privacy Guard application allows you to encrypt and decrypt information, create public and private encryption keys, and use or…

Spartech Software June 7, 2025

Exploitation

DNS hacking

About DNS DNS is a system for resolving computer names into IP addresses, and it does not have a central database. The information is distributed over many thousands of name…

Spartech Software June 7, 2025

Cheat Sheets

What to do after you’ve gained root access

Disable auditing Grab password file Create and "adminkit" Enumerate server information Enumerate secrets of LSA Dump Registry info Use Nltest Pilfer the box Add an administrator account Grab a remote…

Spartech Software June 7, 2025

Cybersecurity News

Backdoored Open Source Malware Repositories Target Noobie Cybercriminals

Cybercriminals too face malware infection when using open source repositories without properly checking them, new research from Sophos shows. This year alone, dozens of reports have revealed supply chain attacks…

Spartech Software June 7, 2025

Cybersecurity News

The US is offering a whopping $10 million reward to catch the mastermind behind the RedLine malware.

The United States Department of State, through its Rewards for Justice program, is offering a reward of up to $10 million for information regarding Maxim Alexandrovich Rudometov, an individual who…

Spartech Software June 7, 2025

United States	~59% of ransomware attacks globally Thousands per year
Poland	1,000+ per week
Russia	Highest cybercrime threat level
China	Thousands per year
India	115% surge in attacks Q2 2024
Ukraine	Significant surge since 2022
Brazil	Among top countries for blocked attacks
Mexico	65% of businesses hit in 2024
Germany	High targeted rate (EU)
France	High targeted rate (EU)

AS Name	ASN
Bharat Sanchar Nigam Ltd	9829
No.31,Jin-rong Street	4134
CHINA UNICOM China169 Backbone	4837
DigitalOcean, LLC	14061
HUAWEI INTERNATIONAL PTE. LTD.	136907
Amazon.com, Inc.	14618
Alibaba (US) Technology Co., Ltd.	45102
Google LLC	396982
Amazon.com, Inc.	16509
3xK Tech GmbH	200373

IP Address	Notable Exploits/Context
104.238.159.149	SharePoint zero-day, broad exploitation
107.191.58.76	SharePoint zero-day, government targets
96.9.125.147	SharePoint, previously Ivanti exploits
139.162.47.194	Exploits on CitrixBleed 2
38.180.148.215	CitrixBleed 2 campaigns
185.224.128.17	High activity, Netherlands
89.248.163.200	High activity, Netherlands
15.235.218.150	Associated with APT, active C2
45.9.148.114	Associated with C2, malicious netflow
91.107.150.184	C2 infrastructure, recent IoC