jhart-r7

Of the 4 currently known IP addresses involved in the spreading of the Petya(like) malware 
(https://gist.github.com/vulnersCom/65fe44d27d29d7a5de4c176baba45759), we have observed in 
recent Sonar FDNS studies that for each of the IPs, there are, in some cases, a variety of 
additional domains that are hosted on the same IP.  Given that there was likely some
manner of compromise for each of these IPs, it is likely that all domains hosted by each
IP are or will be compromised.

111.90.139.247:
  chyporus.online
  sportmaniac.co.in

jhart-r7

[ jhart@jhart-laptop (08/02/16 17:37:52) ~/rapid7/metasploit-framework/modules/auxiliary/scanner/netbios  ]                                                                                                                                                            
$  diff nbname.rb nbname_probe.rb -uN  
--- nbname.rb	2016-05-16 17:27:36.000000000 -0700
+++ nbname_probe.rb	2016-08-02 17:31:57.000000000 -0700
@@ -10,70 +10,125 @@
 class MetasploitModule < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
-  include Msf::Auxiliary::UDPScanner
+  include Msf::Auxiliary::Scanner

jhart-r7

Keybase proof

I hereby claim:

• I am jhart-r7 on github.
• I am jhart (https://keybase.io/jhart) on keybase.
• I have a public key whose fingerprint is 01BF 7104 4C1A F103 74DA 7725 2FA9 F0A3 AFA8 E9D3

To claim this, I am signing this object:

jhart-r7

```
diff --git a/Gemfile b/Gemfile
index a5a71b8..d12c70b 100755
--- a/Gemfile
+++ b/Gemfile
@@ -1,5 +1,6 @@
 source 'https://rubygems.org'

+gem 'aruba'
 # Need 3+ for ActiveSupport::Concern

jhart-r7

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.11 (GNU/Linux)

mQGiBEPFmkQRBACBzvugYC5K5YqYDpQogW1cH1YvihxwWcTL91m/AQT7TVHRP0Dp
30e/p6CrCivOr5wrvZ7GTFfGsUcICLIG52kfYu9XEvhyzFVvwNwEXBLCrSkJKRX8
mMQ6lovDQ+7RELrKofbfoM2RFvEhiGK3PSLIFYvH56AO4dk/XKhK4spYywCg3PGc
+OzMIwFR8HvY6fZkrnWscyED/0KWVtQxcijG3WM4nYGw8yzV3pBKgZyKDco/mjyH
iZIROBlE8o9FzK2Fsbd9H0wQ1rD8y+nv9SPuObwrPY+q1k3KkCw179+nzI6OX7xi
7eNWJvTYLIDlrxnKh2ynMesbDGN9uGcIG3yANM6JA61qgoDp/swU9VR3gebiDK2v
L5JPA/4lV50exNp8ZZO+uUoobj9iWpG5QT5fBptoTrbBXB8/4FRQCwo6vk+DQUKW