un1c0rn, "Google for vulnerabilities"

On Habré already appeared articles about unprotected mongodb instances and unpatched openssl with heartbleed.
The un1c0rn project decided not to waste time on trifles and to make a whole “vulnerability search engine”, in an article on Motherboard.vice.com, un1c0rn was even called “Google for vulnerabilities.”



UPDATE 06/17/14 - un1c0rn became paid! Now, to access the results of the exploits, they are asked to transfer a sum of at least 0.01 BTC to their wallet

Warning:
Only part of the leaked data is available.
Send your contribution to ... (> 0.01 BTC) to unlock the full leak.

')

The principle of operation is similar to Shodan : the robot scans certain ports for all IP addresses (currently more than 62 thousand are about 59 000 ), but unlike shodan it also launches a set of exploits, and, strangely enough, publishes the results in open form on the website .

The authors of the article argue that if you type in the search box “credit card” and delve into the results you can find a lot of interesting things.

“Rummage” must be thoroughly, because the search leaves much to be desired (for example, you cannot filter by the same IP or range). I myself, to be honest, didn’t go further into viewing the results, but what I saw seems to be quite dangerous information, especially in vulnerabilities like heartbleed.