great work. Pretty sure you can find a lot more scary stuff online by looking for IoT (CoAP, MQTT, etc).
There was a rather scary talk by Lukas Lundgren at defcon 2016 on unauthenticated MQTT[0][1] ... the things he found exposed were just insane. He also used MASSCAN[2], a phenomenal tool, which isn't just useful to probe endpoints but also to actually send payloads (with all its performance/speed benefits).
There was a rather scary talk by Lukas Lundgren at defcon 2016 on unauthenticated MQTT[0][1] ... the things he found exposed were just insane. He also used MASSCAN[2], a phenomenal tool, which isn't just useful to probe endpoints but also to actually send payloads (with all its performance/speed benefits).
[0] https://media.defcon.org/DEF%20CON%2024/DEF%20CON%2024%20pre...
[1] https://www.youtube.com/watch?v=o7qDVZr0t2c
[2] https://github.com/robertdavidgraham/masscan