Academy

Shodan

2 min read

Tags :

Origin :

Links :

Shodan is a search engine that indexes internet-connected devices by scanning their exposed services, banners, and configurations rather than traditional web content. It is commonly used by security professionals to identify vulnerabilities, misconfigurations, and exposed assets across the global internet.

Heuristiques

Trouver des typosquatting

hostname:{MOT} -hostname:{MOT}.{TLD}
  • Basiques (A combiner avec les autres)
    • hostname:sncf
    • http.html:sncf
    • `http.title:sncf
    • ssl:sncf
    • ssl.cert.subject.CN:sncf
  • Vulnérabilités TLS / SSL
    • ssl.version:SSLv2
    • ssl.version:SSLv3
    • ssl.version:TLSv1.0
    • ssl.version:TLSv1.1
  • Certificats
    • ssl.cert.expired:true
    • ssl:self-signed
  • Fichiers sensibles
    • http.title:"index of/"
    • http.title:"gitlab"
    • "230 login successful" port:"21"
    • http.title:"phpinfo()"
  • Subdomains takeover
    • http.html:"The specified bucket does not exist"
    • http.html:"Trying to access your account?"
    • http.html:"With GetResponse Landing Pages, lead generation has never been easier"
    • http.html:"No settings were found for this company:"
    • http.html:"is not a registered InCloud YouTrack"
    • http.html:"No Site For Domain"
    • http.html:"It looks like you may have taken a wrong turn somewhere. Don't worry...it happens to all of us."
    • http.html:"This job board website is either expired or its domain name is invalid."
    • http.html:"Non-hub domain, The URL you've accessed does not provide a hub."
    • http.html:"Do you want to register *.wordpress.com?"
    • http.html:"Hello! Sorry, but the website you’re looking for doesn’t exist."
    • http.html:"There isn't a GitHub Pages site here."
  • Produits sensibles
    • port:2375 product:"docker"
    • title:"citrix gateway"
    • "MongoDB Server Information" port:27017 -authentication
    • 230 login successful port:21
    • "220" "230 Login successful." port:21
    • port:23 console gateway
    • "authentication disabled" port:5900,5901 "authentication disabled" "RFB 003.008"
    • http.html:"* The wp-config.php creation script uses this file"
    • port:9200 html:elastic
    • product:MySQL
    • product:MongoDB
    • port:9200 json
    • product:Memcached
    • product:CouchDB
    • port:5432 PostgreSQL
    • port:8087 Riak
    • product:Redis
    • product:Cassandra
  • Querys
    • http.title:"sncf" -hostname:sncf
  • CVE

Graph View