u/Janet-Voigt

Fullstack developer available for urgent projects, bug fixes and fast MVP development. Experienced with AI integrations, OpenAI APIs, FastAPI, Docker, Python automation, Discord/Telegram bots, web scraping, SaaS tools and deployment troubleshooting. I can quickly jump into existing codebases, debug issues, improve performance and ship working solutions fast. Available immediately for short-term fixes or ongoing work. Strong communication, fast turnaround and focused on getting things done without wasting time. If you need a developer who can build, fix or automate something today, send me a message with details and I can start right away.

I’m doing some „research“😁and trying to find all publicly exposed instances of a specific web application by searching for its HTML title tag.

I’ve already tried:
• Censys – ~10 results
• FOFA – 3 results (best so far)
• ZoomEye – 0 results
• Netlas – 0 results
• Criminal IP – not tested yet

Query I’m using: title:"MyAppName"

The app runs on non-standard ports (9000, 9001) which I think is why some scanners miss it.

In real-world threat models: how realistic is passive interception of HTTP POST bodies over the public internet without client/server compromise?

I’m trying to understand where practitioners draw the line between:

• local network MITM
• compromised routing infrastructure
• vs. unrealistic attacker assumptions

Would you consider plaintext HTTP primarily a transport-layer risk (MITM), or also a meaningful exposure at scale without privileged network position?