nullfuzz-pentest/shodan-dorksدوركس شودان
يقدم مستودع GitHub هذا مجموعة من استعلامات البحث، المعروفة باسم "dorks"، لـ Shodan، وهي أداة قوية تُستخدم للبحث عن الأجهزة المتصلة بالإنترنت. تم تصميم هذه الاستعلامات لمساعدة باحثي الأمن على اكتشاف الثغرات الأمنية المحتملة ومشكلات التكوين في أنواع مختلفة من الأجهزة مثل كاميرات الويب وأجهزة التوجيه والخوادم. هذا المورد مفيد للمهتمين باستكشاف أمن الشبكات وإجراء فحص الثغرات، سواء كانوا مبتدئين أو محترفين ذوي خبرة في مجال أمن المعلومات. من خلال الاستفادة من هذا المستودع، يمكن للمستخدمين تحسين أمان شبكاتهم الخاصة والحماية من الهجمات المحتملة.
"TIBCO Spotfire Server"
title:"3ware"
title:"Acunetix"
title:"AddOnFinancePortal"
title:"Administration login" html:"poste
"220 Tornado-vxWorks"
3.1.3.150324
3Com 3CDaemon FTP
"ADI Convergence Galaxy"
'AFP'
app:"Keycloak"
"ArGoSoft FTP Server"
"Backdrop CMS"
BetaFTPD
"/bitrix/p3p.xml"
"BlackMoon FTP Server"
"BlackMoon FTP Server - Free Edition"
"Cerberus FTP Server"
"Check Point FireWall-1 Secure FTP"
"/Citrix/StoreWeb"
"Cleo VLProxy"
"Code-Crafters ftp"
"CommuniGate Pro FTP Server"
cpe:"cpe:2.3🅰️apache:http_server"
cpe:"cpe:2.3🅰️microsoft:sharepoint_server"
cpe:"cpe:2.3🅰️roundcube:webmail"
cpe:"cpe:2.3🅰️xiongmaitech:uc-httpd"
'cpe:"cpe:2.3⭕fortinet:fortios"'
cpe:"cpe:2.3⭕microsoft:windows_10_1903"
cpe:"cpe:2.3⭕microsoft:windows_server_2012"
"Device Identification: Schneider Electric"
"devtools.nestjs.com"
discovery: [suggested query]
"DiskStation FTP server ready"
'django'
dork for asset discovery
"DPTMMSG"
"Dumb FTP Server (dftpd)"
"EasyCoder FTP Server"
"Erlang OTP"
"EZNET_"
"Four-Faith"
"Freebox FTP Server"
"FTP ( BlackJumboDog"
"FTPD1 IBM FTP CS"
"FTP server (BSDI"
"FTP server (FirstClass"
"FTP server (Medusa Async"
"FTP server (NetBSD-ftpd"
"FTP Server (Oracle XML DB"
"FTP server (SunOS 5.6)"
"FTP server (SunOS 5.8)"
"FTP Server (ZyWALL"
"Ftp service of Jana-Server ready"
"Gene6 FTP Server"
"GlobalSCAPE Secure FTP Server"
"Global Site Selector FTP"
"Golden FTP Server Pro"
"Hewlett-Packard"
html:"a-blog cms"
html:"access MongoDB"
html:"acme-challenge"
html:"adrum"
html:"ADSB"
html:"airmedia"
html:"/airwatch/default.aspx"
html:"Akamai CloudTest"
html:"/apriso/"
html:"apriso"
html:"assetlinks.json"
html:"_astro"
html:"Avaya Aura® Utility Services"
html:"AWSEBDockerrunVersion"
html:"Backdrop CMS"
html:"Batflat"
html:"BeeStation"
html:"BentoML"
html:"/bitrix/"
html:"bootstrap-multiselect"
html:"browserconfig.xml"
html:"Casdoor"
html:"/ccmadmin/"
'html:"cdnjs.cloudflare.com/ajax/libs/bulma" || html:"unpkg.com/bulma" || html:"bulma.css" country:"DE"'
html:"cdn.mxpnl.com"
html:"/cgi-bin/cgiServer.exx"
html:"ChanCMS"
html:"Chatbot Arena"
html:"cloudflare/speedtest"
html:"CMSimple"
html:'content="Mattermost"'
html:'content="SLiMS'
html:'content="SLIMS'
html:"Couchbase"
html:""couchdb":"
html:"/+CSCOE+/logon.html"
html:"/css/osasiasp.css"
html:"Cyber Stealer - Secure Access"
html:"DD_RUM.init"
html:"Dependency-Track"
html:"D-Link Central WiFiManager"
html:"Docker Registry Browser"
html:"Doc/WebLogin.asp"
html:"draw.io"
html:"ENVIROMUX"
html:"eSlideManager - Login"
html:"eslintignore"
html:"ETIC Telecom"
'html:"ETQ Reliance"'
html:"ETQ Reliance"
html:"evertz.min.css"
html:"EyesOfNetwork"
html:"ForgeRock Identity Platform"
html:"/fort/login"
html:"foundation.min.css"
html:"foxcms-logo"
html:"_fs_org"
html:"Glimpse.axd"
html:"globalThis.BESZEL"
html:"GnuBoard5"
html:"grafana"
html:"graph_view.php" html:"cacti"
html:"gunicorn.conf.py"
html:"haproxy.cfg"
html:"hp/device/SignIn/Index"
html:"HPE" html:"OneView"
html:"HPE OfficeConnect"
html:"httpbingo.org"
html:"hyperdx"
html:"iboss-font.css"
html:"icinga" html:"Statistics"
html:"ICTBroadcast"
html:"InterMapper"
html:"invision community"
html:"iTop login"
html:"Jakefile"
html:"Journyx"
html:"K1000 Logo"
html:"kaswara"
html:"keybase.txt"
html:"LANDesk"
html:"Langflow"
html:"LDClient.initialize"
html:"liferayPortalCSS"
html:"Lighthouse Studio"
html:"lightstreamer"
html:"lighttpd.conf"
html:"Listmonk"
html:"/llms.txt"
html:"log4j.properties"
html:"Log in to dex"
html:"Login to Frappe"
html:"/logo_login.shtm"
html:"MagnusBilling"
'html:"MapProxy"'
html:"materialize.min.css"
html:"mcp.json"
html:"memtracker"
html:"meteor_runtime_config"
html:"MFC-L9570CDW"
html:"MiCollab End User Portal"
html:"Mitel" html:"MiCollab"
html:"MOLGENIS"
html:"/mstore-api/"
html:"next.config.js"
html:"Nexus Repository"
html:"NPLUG"
html:"ntfy.sh"
html:"nuxt.config.ts"
html:"OA_HTML"
html:"Odoo"
html:"OpenMRS"
html:"OpenPLC"
html:"Openspeedtest"
html:"/?op=registration" "OpenSSL"
html:"Optergy"
html:"osTicket"
html:"PEPLINK"
html:"Perforce"
html:"phpmyadmin"
html:"/plugins/duracelltomi-google-tag-manager/"
html:"/plugins/google-captcha"
html:"/plugins/megamenu"
html:"/plugins/newsletter/"
html:"/plugins/sg-cachepress/"
html:"/plugins/tutor/"
html:"/plugins/woocommerce-admin"
html:"/plugins/worker/"
html:"plugins/wpdirectorykit/"
html:"/plugins/wp-pagenavi/"
html:"pomerium"
html:"Portkey AI"
html:"posstaticfooter"
html:"PostgREST"
html:"posthog.init"
html:"postmaster_start_time"
html:"Powered by vtiger CRM"
html:"Proxmox = {"
html:"qdrant - vector search engine"
html:"redirect.pizza"
html:"redoc.standalone.js"
html:"RIoT Controller"
html:"Rocket LMS"
html:"Roxy-WI"
html:"RuoYi"
html:"ruxitagentjs"
html:"SAP NetWeaver Application Server Java"
html:"scoold-wrapper"
html:"sekolahku.web"
html:"semantic.min.css"
html:"Sentry.init"
html:"server-islands"
html:"SERVER_SIDE_FIDES_API_URL"
html:"setupconfig.xml"
html:"setup.py"
html:"Shibboleth"
html:"siam-convite"
html:"SickChill"
html:"simple-mobile-url-redirect"
html:"Site Not Found | Framer"
html:"SLIMS"
html:"SmarterMail"
html:"smtp_password"
html:"SonicWall" html:"SMA"
html:"/themes/astra/"
html:"TIBCO Managed"
html:"Tiny Tiny RSS"
html:"TiTiler"
html:"Mage"
html:"ProTop"
html:"<title>SuperTokens "
html:"tolgee"
html:"TOPdesk"
html:"TOTOLINK"
'html:"TRUfusion Enterprise"'
html:"/ucmuser/"
html:"UniFi Dream Machine SE"
html:"URVE Web Manager"
html:"var Liferay"
html:"veraCoreScreenHeight"
html:"vercel.json"
html:"voyager.min.js"
html:".vscode" html:"Directory listing for /"
html:"Vugex Framework"
html:"WAGO Ethernet Web-based Management"
html:"Watchguard" html:"Authentication Server"
html:"/web/cgi-bin/usbinfo.cgi"
html:"webui-centerpanel"
html:"Wekan"
html:"window.apos"
html:"wire:id"
html:"wp-content/plugins/cmp-coming-soon-maintenance"
html:"wp-content/plugins/download-manager/"
html:"/wp-content/plugins/gravityforms"
html:"wp-content/plugins/header-footer-elementor/"
html:"/wp-content/plugins/sitepress-multilingual-cms"
html:"wp-content/plugins/system-dashboard/"
html:"/wp-content/plugins/the-events-calendar/"
html:"wp-event-solution"
html:"WRN150"
html:"www.teccom-eu.net/wsdl"
html:"xstoremgwt"
html:"yeswiki"
html:"Yeti"
html:"ZimaOS"
html:"Zimbra Collaboration Suite Web Client"
html:"Zipline"
'http.component:"Apache Struts"'
http.component:"aurelia"
http.component:"cherrypy"
http.component:"Craft CMS"
http.component:"Discourse"
http.component:"django"
http.component:"Flask"
http.component:"joomla"
http.component:"lighttpd"
http.component:"Microsoft SharePoint"
http.component:"mochiweb" country:"US"
http.component:"Next.js"
http.component:"october cms"
http.component:"OpenCart"
http.component:"osCommerce"
http.component:"php"
http.component:"Plone"
http.component:"profilepress"
http.component:"roundcube"
http.component:"ServiceNow"
http.component:"sharepoint"
http.component:"Sharepoint"
http.component:"Shopify"
http.component:"SilverStripe"
http.component:"Squarespace"
http.component:"symfony"
http.component:"typo3"
http.component:"winstone servlet container"
http.component:"wordpress"
http.component:"WordPress"
http.component:"wordpress" http.html:"status-draft"
http.component:"wordpress" && http.html:"/wp-content/plugins/simple-user-registration/"
http.favicon.hash:1015186617
http.favicon.hash:-1033616879
http.favicon.hash:1111283449
http.favicon.hash:1163764264
http.favicon.hash:1185161484
http.favicon.hash:1192389544 port:3580
http.favicon.hash:"-1250474341"
http.favicon.hash:1253194620
http.favicon.hash:129457226
http.favicon.hash:-1338105374
http.favicon.hash:"-1381126564"
http.favicon.hash:-1410437493
http.favicon.hash:1436966696 http.html:"/css/archiver.css"
http.favicon.hash:-1445519482
http.favicon.hash:"1540720428"
http.favicon.hash:-1569311459
http.favicon.hash:"-165268926"
http.favicon.hash:1696974531
http.favicon.hash:-177043778
http.favicon.hash:-1889244460
http.favicon.hash:"1895809524"
http.favicon.hash:-1924700661
http.favicon.hash:-1952619005
http.favicon.hash:203612613
http.favicon.hash:-234487373
http.favicon.hash:-236105569
http.favicon.hash:252728887
http.favicon.hash:-268676052
http.favicon.hash:-282504889
http.favicon.hash:"284403119"
http.favicon.hash:-286484075 http.title:"Open WebUI"
http.favicon.hash:"362091310"
http.favicon.hash:385597939
http.favicon.hash:489905671
http.favicon.hash:-534530225
http.favicon.hash:-542502280
http.favicon.hash:-60395993
http.favicon.hash:-631002664
http.favicon.hash:"733091897"
http.favicon.hash:-741058468 "lighttpd/1.4.32"
http.favicon.hash:-742276344
http.favicon.hash:831854882
http.favicon.hash:-847792508
http.favicon.hash:-915768386
http.favicon.hash:"97378986"
http.headers_hash:1985490094
http.html:"Adfinity"
http.html:"Agent Development Kit Dev UI"
http.html:"Apollo Sandbox"
http.html:"astro"
http.html:"ASUSTOR"
'http.html:"AWStats"'
http.html:"backup-migration"
http.html:"BeyondTrust"
http.html:"bitrix"
http.html:"cdn.raygun.io"
http.html:"cgit"
http.html:"ChanCMS"
http.html:"cockpit"
http.html:"cockpit/static/login.css"
http.html:"Craft CMS"
http.html:"craftercms"
http.html:"CREATE TABLE" http.html:"SELECT"
http.html:"data-xwiki-reference"
http.html:"debug_kit"
http.html:"Docusaurus"
http.html:"EktronClientManager"
http.html:"embedpano"
http.html:"Expert Net Control"
http.html:"flDebugToolbar"
http.html:"Flock Admin"
http.html:"flutter_bootstrap.js"
http.html:"FreshRSS"
http.html:"ganglia_form.submit()"
'http.html_hash:1076109428 ssl.cert.issuer.cn:"IOS-Self-Signed-Certificate" port:8443'
"http.html_hash:-1466805544"
'http.html_hash:-1527157728 "Model: FMG-VM"'
http.html:"imgproxy"
http.html:"ImpressCMS"
http.html:"Index of" http.html:"sessions"
http.html:" itop login"
http.html:"klik_loginsystem"
http.html:"laminas"
http.html:"Line-TCPRS1"
http.html:"login to your cyberpanel account"
http.html:"LogRocket.init"
http.html:"matomo.js"
http.html:"/melis/MelisCms"
http.html:"MPDV"
http.html:"MyBB"
http.html:"N8n"
http.html:".node_repl_history"
http.html:".npmignore"
http.html:"</OAI-PMH"
http.html:"oceanwp" http.html:"woocommerce"
http.html:"Ollama" port:11434
http.html:"opencode"
http.html:"OpenProject"
http.html:"postman.json"
http.html:"Powered by phpcms"
http.html:".prettierignore"
http.html:"q:version"
http.html:"RailsAdmin"
http.html:"report server web portal"
http.html:"Request-Baskets"
http.html:"roadiz"
http.html:SAP Message Server
http.html:"Selenium Grid" "ready"
http.html:"seo-automatic-seo-tools"
http.html:"ServiceStack"
http.html:"SitecoSitecore Experience Platform"
'http.html:"SPIP"'
http.html:"static.hotjar.com"
http.html:"static.openreplay.com"
http.html:".stylelintignore"
http.html:"TOTOLINK"
'http.html:trx_addons'
http.html:"umbraco"
http.html:"UniFi OS"
http.html:"/VAADIN/"
http.html:"vben" || http.html:"vue-vben-admin"
http.html:"VictoriaMetrics"
http.html:"vtiger CRM"
http.html:"wc-multivendor-membership"
http.html:"window.frappe"
'http.html:"/wp-content/plugins/ai-engine/"'
http.html:"/wp-content/plugins/ditty-news-ticker/"
http.html:"wp-content/plugins/event-monster"
http.html:"/wp-content/plugins/fluentform/"
http.html:"/wp-content/plugins/give/"
http.html:"/wp-content/plugins/jeg-elementor-kit"
http.html:"/wp-content/plugins/learning-management-system/"
http.html:"/wp-content/plugins/learnpress"
http.html:"/wp-content/plugins/learnpress/"
http.html:"/wp-content/plugins/litespeed-cache/"
http.html:"wp-content/plugins/media-library-assistant"
http.html:"/wp-content/plugins/nd-booking"
http.html:"/wp-content/plugins/newsletter/"
http.html:"wp-content/plugins/post-timeline/"
http.html:"/wp-content/plugins/protect-wp-admin"
http.html:"/wp-content/plugins/sassy-social-share"
http.html:"/wp-content/plugins/seo-by-rank-math/"
http.html:"/wp-content/plugins/stop-user-enumeration/"
http.html:"/wp-content/plugins/the-events-calendar/"
http.html:"/wp-content/plugins/ultimate-faqs"
"http.html:/wp-content/plugins/ultimate-member/"
http.html:"/wp-content/plugins/woocommerce-abandoned-cart/"
http.html:"/wp-content/plugins/wpappninja"
'http.html:"wp-content/plugins/wp-automatic/"'
http.html:"/wp-content/plugins/wp-recall/"
http.html:"wp-google-maps"
http.html:"ypareo"
http.html:"zen-cart" || http.html:"Zen Cart"
http.html:"ZKTeco Security"
http.html:"zk.wpd" OR http.html:"<!-- ZK "
'http.title:"Adminer"'
http.title:"ADSelfService Plus"
http.title:"AJ-Report"
http.title:"Amatera App"
http.title:"Ambassador Diagnostic Overview"
http.title:"apache druid"
http.title:"Apache kafka"
http.title:"Apache Unomi"
http.title:"argo cd"
'http.title:"Artifactory"'
http.title:"beszel"
http.title:"biotime"
http.title:"bofamet"
'http.title:"Bonita" || "Server: Bonita"'
http.title:"Cascade CMS"
http.title:"Change Detection"
http.title:"ChirpStack LoRaWAN"
http.title:"churchcrm"
http.title:"Cisco Prime License Manager"
http.title:"Cisco Webex Meetings"
http.title:"citrix gateway" || title:"netscaler gateway"
http.title:"Cobbler Web Interface"
http.title:"ComfyUI"
http.title:"Content Server"
http.title:"Cortex XSOAR"
http.title:"Dagster"
http.title:"dbt Docs"
http.title:"DGN2200"
http.title:"Dify"
http.title:"EasyCVR"
'http.title:"eclipse birt home"'
http.title:"Electrolink"
'http.title:"elfinder"'
http.title:"elfinder"
'http.title:"Emerson Network Power IntelliSlot Web Card"'
http.title:"emlog"
'http.title:"ENIGMA NMS"'
http.title:"ESPHome"
http.title:"eureka"
http.title:"Feast Feature Store"
http.title:"File Exchange"
http.title:"FlexNet Login"
http.title:"Flower"
http.title:"Flowise"
http.title:"Flowise - Build AI Agents, Visually"
http.title:"Frigate"
http.title:"geoserver"
'http.title:"HedgeDoc - Ideas grow better together"'
http.title:'Home - Default Site'
http.title:"HOOBS"
http.title:"horizon daas"
http.title:"HP LaserJet"
http.title:"IBM Security Verify Access"
http.title:"IBM Spectrum"
http.title:"Ice Hrm Login"
'http.title:"IceWarp"'
http.title:"Index of" http.html:"CFIDE"
http.title:"Index of" http.html:"glpi"
'http.title:"InvoiceShelf"'
http.title:"ipTIME"
http.title:"irisnext"
http.title:"ITFlow"
http.title:"ivanti connect secure"
http.title:"Kanboard"
http.title:"LG LED Assistant"
'http.title:"LG LED Assistant" OR http.title:"LED Assistant"'
http.title:"LiquidFiles"
http.title:"Login | Zoraxy"
http.title:"Maltrail"
http.title:"manageengine"
http.title:"Meshery"
http.title:"Metabase" http.html:"setup"
'http.title:"Microweber"'
http.title:"minio console"
http.title:"Monsta FTP"
http.title:"Munin"
http.title:"Network Video Recorder Login"
http.title:"nginx ui"
http.title:"ngSurvey enterprise survey software"
http.title:"NocoDB"
http.title:"NocoDB" || http.favicon.hash:"-1123780655"
http.title:"Nordex Control - Wind Farm Portal"
http.title:"opensign"
http.title:"OpenVPN Access Server"
http.title:"OpManager"
http.title:"oracle peoplesoft enterprise"
http.title:"pgAdmin"
http.title:"phpMyAdmin"
'http.title:"phpMyFAQ"'
http.title:"Polycom HDX"
http.title:"pritunl"
http.title:"Prometheus Time Series"
http.title:"qnap"
http.title:"Redmine"
http.title:"reposilite"
http.title:"Sanity Studio"
http.title:"Seafile"
http.title:"SharePoint"
http.title:"Shibboleth IdP"
http.title:"Sign In - Gogs"
http.title:"SmarterMail"
http.title:"Sophos"
http.title:"Spark" http.html:"Environment"
http.title:"Stirling PDF"
http.title:"Symfony"
http.title:"T24 Sign in"
http.title:"temBoard"
http.title:"tenda wifi"
http.title:"ThingsBoard"
http.title:"Traefik"
http.title:"Traggo"
http.title:"Trust Center"
http.title:"Umbraco"
http.title:"Unified Communications Self Care Portal"
http.title:"Uptime Kuma"
http.title:"vlife"
http.title:"vrealize log insight"
'http.title:"VulnApp"'
'http.title:"Weblate"'
http.title:"Welcome to BlueMind"
http.title:"WNR614"
http.title:"woodpecker"
http.title:"WordPress" "graphql"
http.title:"Xymon"
http.title:"Zammad Helpdesk"
http.title:"Zimbra Collaboration Suite"
'http.title:"用友" "NC"'
http.title:"神行者路由"
"Hummingbird Ltd. (HCLFTPD)"
inurl:"/plugins/generic/tinymce/plugins/justboil.me/"
"Ipswitch-IMail"
"Java FTP Proxy Server"
"JD FTP Server Ready"
"LANIER MP 2555 FTP server"
"Mac OS X Server's FTP server"
Maverick_SSHD
"meteobridge"
"MiniUPnPd"
"mynodename"
"NcFTPd Server"
"NET Disk FTP Server ready"
"NETGEAR DGN"
"Network Management Card AOS"
nfs
"NTP"
"ntpsec"
"Nucleus FTP Server"
"OpenDreambox FTP service"
"Oracle Internet File System FTP"
"Oracle-iPlanet-Web-Server"
oracle port:1521
OrangeHRM
"PacketShaper FTP server"
"Personal FTP Server"
"Plesk"
port:1883 broker
port:22 "Debian"
port:"3389"
'port:44818 "Vendor ID: Rockwell Automation/Allen-Bradley"'
'port:4786 "Smart Install"'
port:4899 product:"Famatech Radmin"
port:502 "P34"
port:502 "P58"
port:52311 "BigFixHTTPServer"
port:53
port:5353
"port:7"
'port:8009 product:"Apache Tomcat"'
port:9100
'"Prefect" port:4200'
"PrNET FTP server"
product:"Allegro RomPager"
product:"check_mk"
product:cockroachdb
product:"Consul"
product:"Direct Connect P2P"
product:"Dovecot Pigeonhole sieve"
product:"Emby Media Server"
product:"FileZilla"
product:"FileZilla Server"
product:"Grafana"
product:"IronPort AsyncOS http config"
product:"Java Debug Wire Protocol"
product:"Java Message Service"
product:"Kyocera Printer Panel"
'product:"Microsoft ftpd"'
product:"MongoDB"
product:"NATS Server"
product:openclaw
product:"oracle weblogic"
product:"ProFTPD"
product:"Pure-FTPd"
product:"Pure-FTPd" version:"1.0.14"
product:"Pure-FTPd" version:"1.0.24"
product:"QNAP"
product:"redis"
product:"SAProuter"
product:"SNMP"
product:"SonicWALL Email Security"
product:"Titan FTP"
product:"Titan ftpd"
product:"Titan ftpd" version:"16.00.2672"
product:"Veritas Backup Exec"
product:"vnc"
product:"Vtun Virtual Tunnel"
product:"Weebly"
product:"WinRM"
"PROXY-FTP server"
"pSOSystem FTP server"
"/responsive-coming-soon/"
"RIEDEL Artist FTP Server"
"rlogin"
rocketmq port:"9876"
"sails.sid"
"Sambar FTP Server"
"Secure Gateway FTP server"
"Server: Apache/"
'"Server: Apache/" "centos"'
"Server: Aragorn Mitel"
'Server: Boa/0.94.13'
"Server:Cross Web Server"
'Server: cwpsrv'
"Server: Jetty"
"Server: magicinfo premium server"
'Server: MagicInfo Premium Server'
"Server: Mongoose"
'server:"ms .net remoting"'
"server:nginx"
"Server: nginx/"
"Server: squid/"
"Server: UserGate-UTM/42"
'Server: Virtual Web 0.9'
'Server: webswing.org'
"Server: ZEROF Web Server"
"Serv-U FTP Server"
'"Set-Cookie: APPSESSIONID=" "Path=/admin"'
"Set-Cookie: ips4"
"Set-Cookie: MEDDREAMSESSID"
"Sidewinder ftp proxy"
'SSH-2.0-Erlang'
"SSH-2.0-Serv-U"
ssl.cert.subject.cn:"cloud-object-storage.appdomain.cloud"
ssl:"cn=fortiweb"
'ssl:"Grandstream" "Set-Cookie: TRACKID"'
ssl:"ingress-nginx" port:8443
ssl:"ou=fortiswitch"
"storage.googleapis.com"
"system: port:123"
"text/event-stream"
The Avalaunch FTP system
"Titan FTP Server"
title:"123Solar"
title="ACMAILER4.0"
title:"ActiveMQ Artemis Console"
title:"AcuToWeb"
title:"Ad Hoc Transfer"
title:"Agent Zero"
title:"Airflow"
title:"AMR Printer Management"
title:"Apache StreamPark"
title:"Apache Tika"
title:"Applications Manager Login Screen"
title:"Arc for TM1"
title:"Aruba"
title:"AVAMAR"
title:"Bugzilla"
title:"Canon iR-ADV"
title:"CentreStack"
title:"cheat.sh"
title:"ChurchCRM"
title:"Cisco Finesse" port:8445
title:"Cockpit"
title:"DAEnetIP4"
'title:"Dagu"'
'title:"Datart"'
title:"DELMIA Apriso"
title:"Dkron"
title:"DKRON"
title:"D-Link"
title:dokploy
title:"D-Tale"
title:"EkoAPI Admin"
title:"eXist db"
title:"Expedition"
title:"eZ Server Monitor"
title:"F660"
title:"FileCatalyst"
title:"FlexPaper"
title:"FLIR"
title:"Flowise"
title:FortiRecorder
title:"FortiWeb - "
title:"FortiWLM Login"
title:"FUXA"
title:"Gerrit Code Review"
title:"Gitness"
title:"GLPI"
title:"GoAnywhere"
title:"Group-Office"
title:"HertzBeat"
title:"HiveServer2"
title:"iBarn"
title:"IBM Data Risk Manager"
title:"IBM Security Verify Access"
title:"idcCMS"
title:"imageRUNNER"
title:"index" html:".vscode"
title:"Intelbras"
title:"Jfrog"
title:"JHipster"
'title:"Joplin Server"'
title:"KACE Systems Management"
title:"Kong Manager"
title:"LabKey"
title:"Langflow"
title="Laser Printer"
title:"Leantime"
title:"MagicINFO"
title:"MailEnable"
title:"Mailpit"
title:"Memos"
title:"mindsdb"
title:"Miniweb Start Page"
title:"Mongoose"
title:"NAKIVO"
title:"netis router"
title:"NetScaler Console"
title:"NetScaler Gateway"
title:"NextChat"
title:"NextcloudPi"
title:"NextcloudPi Panel"
title:"Nexus Repository Manager"
title:"NUUO"
'title:"OFBiz"'
title:"OpenMetadata"
title:"OpenSearch"
title:"oracle access management"
'title:"Pacts"'
title:"Phoenix Contact - CHARX"
title:"PhotoPrism"
title:"PicHome"
title:"PowerJob"
title:"Rancher"
title:"Redis Commander"
title:"Remotely"
title:"RevPi"
title:"RustDesk API Admin"
title:"SaaS Composer"
title:"SAP Management Console"
title:"Scalar API Reference"
title:"SIMATIC 300"
title:"smtp4dev"
title:"spark master at"
title:"StrongShop"
title:"Supervisor Status"
title:"Theia IDE"
title:"TileServer-php"
'title:"TL-WR840N"'
title:"TOTOLINK"
'title:"TP-Link Router"'
title:"Traccar"
title:"UniFi OS"
title:"Unisphere"
title:"Usermin"
title:"VeloCloud"
title:"Vite App"
title:"Voyager"
title:"WAGO Ethernet Web-based Management"
title:"Wazuh"
title:"Weaviate"
title:"Weaviate Console"
title:"Welcome to the Apache Tika"
title:"Yii"
title:"zpan"
title:"Р7-Офис"
title:"用友"
"TP print service"
"Treck FTP server"
"TYPSoft FTP Server"
VMware vCenter Server
"vsFTPd"
'vuln:CVE-2023-40000'
"Welcome to Baby FTP Server"
'"Welcome to " "list of available commands" port:4244'
"Welcome to Network Camera FTP Server"
"Welcome to Pablo's FTP Server"
"Welcome to Pure-FTPd"
"Wind River FTP server"
"WordPress"
'wp-content/plugins/wp-simple-firewall/'
"X2 WS_FTP Server"
'x-amz-meta-s3cmd-attrs'
"X-Application-Context"
"X-backend-server"
"X-Backend-Server"
"x-envoy-peer-metadata"
"Xerver Free FTP Server"
"Xlight FTP Server"
"X-Magento-Tags"
"x-middleware-rewrite"
"X-OWA-Version"
'X-Powered-By: AdonisJs'
"X-Powered-By: PHP/"
'X-Served-By: cache'
"yeswiki"
"Z-FTP"
http.title:tinypilot
title:"hid - TinyPilot"
title:"tinypilot" -title:"Log In"
### city:
ابحث عن الأجهزة في مدينة معينة.
`city:"Bangalore"`
### country:
ابحث عن الأجهزة في بلد معين.
`country:"IN"`
### geo:
ابحث عن الأجهزة بإعطاء إحداثيات جغرافية.
`geo:"56.913055,118.250862"`
### الموقع
`country:us`
`country:ru country:de city:chicago`
### hostname:
ابحث عن الأجهزة المطابقة لاسم المضيف.
`server: "gws" hostname:"google"`
`hostname:example.com -hostname:subdomain.example.com`
`hostname:example.com,example.org`
### net:
ابحث عن الأجهزة بناءً على عنوان IP أو CIDR /x.
`net:210.214.0.0/16`
### المؤسسة
`org:microsoft`
`org:"United States Department"`
### رقم النظام المستقل (ASN)
`asn:ASxxxx`
### os:
ابحث عن الأجهزة بناءً على نظام التشغيل.
`os:"windows 7"`
### port:
ابحث عن الأجهزة بناءً على المنافذ المفتوحة.
`proftpd port:21`
### before/after:
ابحث عن الأجهزة قبل أو بعد وقت معين.
`apache after:22/02/2009 before:14/3/2010`
### شهادات SSL/TLS
الشهادات ذاتية التوقيع
`ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com`
الشهادات منتهية الصلاحية
`ssl.cert.expired:true`
`ssl.cert.subject.cn:example.com`
### نوع الجهاز
`device:firewall`
`device:router`
`device:wap`
`device:webcam`
`device:media`
`device:"broadband router"`
`device:pbx`
`device:printer`
`device:switch`
`device:storage`
`device:specialized`
`device:phone`
`device:"voip"`
`device:"voip phone"`
`device:"voip adaptor"`
`device:"load balancer"`
`device:"print server"`
`device:terminal`
`device:remote`
`device:telecom`
`device:power`
`device:proxy`
`device:pda`
`device:bridge`
### نظام التشغيل
`os:"windows 7"`
`os:"windows server 2012"`
`os:"linux 3.x"`
### المنتج
`product:apache`
`product:nginx`
`product:android`
`product:chromecast`
### معدات موقع العميل (CPE)
`cpe:apple`
`cpe:microsoft`
`cpe:nginx`
`cpe:cisco`
### الخادم
`server: nginx`
`server: apache`
`server: microsoft`
`server: cisco-ios`
### بصمات SSH
`dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0`
# الويب
### Pulse Secure
`http.html:/dana-na`
### شهادات PEM
`http.title:"Index of /" http.html:".pem"`
### مواقع Tor / Dark Web
`onion-location`
# قواعد البيانات
### MySQL
`"product:MySQL"`
`mysql port:"3306"`
### MongoDB
`"product:MongoDB"`
`mongodb port:27017`
### MongoDB مفتوحة بالكامل
`"MongoDB Server Information { "metrics":"`
`"Set-Cookie: mongo-express=" "200 OK"`
`"MongoDB Server Information" port:27017 -authentication`
### لوحات Kibana بدون مصادقة
`kibana content-legth:217`
### elastic
`port:9200 json`
`port:"9200" all:elastic`
`port:"9200" all:"elastic indices"`
### Memcached
`"product:Memcached"`
### CouchDB
`"product:CouchDB"`
`port:"5984"+Server: "CouchDB/2.1.0"`
### PostgreSQL
`"port:5432 PostgreSQL"`
### Riak
`"port:8087 Riak"`
### Redis
`"product:Redis"`
### Cassandra
`"product:Cassandra"`
# أنظمة التحكم الصناعية
### لوحات الإعلانات الإلكترونية من سامسونج
`"Server: Prismview Player"`
### وحدات تحكم مضخات محطات الوقود
`"in-tank inventory" port:10001`
### مضخات الوقود المتصلة بالإنترنت:
لا حاجة للمصادقة للوصول إلى واجهة CLI.
`"privileged command" GET`
### قارئات لوحات الترخيص الآلية
`P372 "ANPR enabled"`
### وحدات تحكم إشارات المرور / كاميرات الضوء الأحمر
`mikrotik streetlight`
### آلات التصويت في الولايات المتحدة
"voter system serial" country:US
### أجهزة الصراف الآلي المفتوحة:
قد تتيح الوصول إلى الصراف الآلي
`NCR Port:"161"`
### شركات الاتصالات التي تشغل Cisco Lawful Intercept Wiretaps
`"Cisco IOS" "ADVIPSERVICESK9_LI-M"`
### هواتف السجون
`"[2J[H Encartele Confidential"`
### حالة شحن Tesla PowerPack
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### شواحن المركبات الكهربائية
`"Server: gSOAP/2.8" "Content-Length: 583"`
### أقمار الاتصالات البحرية
Shodan صنعت متتبعًا رائعًا للسفن يحدد مواقع السفن في الوقت الفعلي أيضًا!
`"Cobham SATCOM" OR ("Sailor" "VSAT")`
### لوحات التحكم في مهام الغواصات
`title:"Slocum Fleet Mission Control"`
### وحدات تبريد CAREL PlantVisor
`"Server: CarelDataServer" "200 Document follows"`
### مزارع توربينات الرياح Nordex
`http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"`
### أجهزة تتبع GPS للمركبات التجارية C4 Max
`"[1m[35mWelcome on console"`
### أجهزة الأشعة الطبية DICOM
مؤمنة بشكل افتراضي، والحمد لله، لكن هذه الأجهزة التي يزيد عددها عن 1700 جهاز لا ينبغي لها أن تكون على الإنترنت.
`"DICOM Server Response" port:104`
### عدادات الكهرباء GaugeTech
`"Server: EIG Embedded Web Server" "200 Document follows"`
### الأتمتة الصناعية من سيمنز
`"Siemens, SIMATIC" port:161`
### وحدات تحكم HVAC من سيمنز
`"Server: Microsoft-WinCE" "Content-Length: 12581"`
### وحدات تحكم الوصول / الأقفال
`"HID VertX" port:4070`
### إدارة السكك الحديدية
`"log off" "select the appropriate"`
### حالة شحن Tesla Powerpack:
يساعد في إيجاد حالة شحن powerpack من تسلا.
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### توربينات الرياح XZERES
`title:"xzeres wind"`
### قارئ لوحات الترخيص الآلي PIPS
`"html:"PIPS Technology ALPR Processors""`
### Modbus
`"port:502"`
### Niagara Fox
`"port:1911,4911 product:Niagara"`
### GE-SRTP
`"port:18245,18246 product:"general electric""`
### MELSEC-Q
`"port:5006,5007 product:mitsubishi"`
### CODESYS
`"port:2455 operating system"`
### S7
`"port:102"`
### BACnet
`"port:47808"`
### HART-IP
`"port:5094 hart-ip"`
### Omron FINS
`"port:9600 response code"`
### IEC 60870-5-104
`"port:2404 asdu address"`
### DNP3
`"port:20000 source address"`
### EtherNet/IP
`"port:44818"`
### PCWorx
`"port:1962 PLC"`
### Crimson v3.0
`"port:789 product:"Red Lion Controls"`
### ProConOS
`"port:20547 PLC"`
# سطح المكتب البعيد
### VNC غير المحمي
`"authentication disabled" port:5900,5901`
`"authentication disabled" "RFB 003.008"`
### Windows RDP
99.99% مؤمنة بواسطة شاشة تسجيل دخول ثانوية من Windows.
`"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"`
# البنية التحتية لـ C2
### خوادم CobaltStrike
`product:"cobalt strike team server"`
`product:"Cobalt Strike Beacon"`
`ssl.cert.serial:146473198` \- رقم الشهادة الافتراضي
`ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1`
`ssl:foren.zik`
### Brute Ratel
`http.html_hash:-1957161625`
`product:"Brute Ratel C4"`
### Covenant
`ssl:”Covenant” http.component:”Blazor”`
### Metasploit
`ssl:"MetasploitSelfSignedCA"`
# البنية التحتية للشبكة
### أجهزة التوجيه المخترقة:
أجهزة التوجيه التي تم اختراقها
`hacked-router-help-sos`
### مثيلات Redis المفتوحة
`product:"Redis key-value store"`
### Citrix:
ابحث عن Citrix Gateway.
`title:"citrix gateway"`
### لوحات Weave Scope
وصول إلى سطر الأوامر داخل حاويات Kubernetes و Docker، وتصور/مراقبة في الوقت الفعلي للبنية التحتية بأكملها.
`title:"Weave Scope" http.favicon.hash:567176827`
### Jenkins CI
`"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"`
### Jenkins:
لوحة تحكم Jenkins غير المقيدة
`x-jenkins 200`
### واجهات برمجة تطبيقات Docker
`"Docker Containers:" port:2375`
### سجلات Docker الخاصة
`"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab`
### خوادم DNS المفتوحة Pi-hole
`"dnsmasq-pi-hole" "Recursion: enabled"`
### خوادم DNS مع التكرار
`"port: 53" Recursion: Enabled`
### تم تسجيل الدخول بالفعل كـ root عبر Telnet
`"root@" port:23 -login -password -name -Session`
### الوصول عبر Telnet:
لا حاجة لكلمة مرور للوصول إلى Telnet.
`port:23 console gateway`
### نظام Polycom للمؤتمرات بالفيديو بدون مصادقة
`"polycom command shell"`
### أجهزة NPort التسلسلية / MoCA بدون كلمة مرور
`nport -keyin port:23`
### جسور Android Root
نتيجة غير مباشرة لنهج التحديثات المكسور من Google. 🙄 مزيد من المعلومات هنا.
`"Android Debug Bridge" "Device" port:5555`
### محول Lantronix التسلسلي إلى Ethernet الذي يسرب كلمات مرور Telnet
`Lantronix password port:30718 -secured`
### تطبيقات Citrix الافتراضية
`"Citrix Applications:" port:1604`
### Cisco Smart Install
ضعيف (نوعًا ما "حسب التصميم"، خاصة عند التعرض).
`"smart install client active"`
### بوابات هاتف IP PBX
`PBX "gateway console" -password port:23`
### مؤتمرات الفيديو Polycom
`http.title:"- Polycom" "Server: lighttpd"`
`"Polycom Command Shell" -failed port:23`
### تكوين Telnet:
`"Polycom Command Shell" -failed port:23`
مثال: مؤتمرات الفيديو Polycom
### بوابة Bomgar Help Desk
`"Server: Bomgar" "200 OK"`
### Intel Active Management CVE-2017-5689
`"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995`
`”Active Management Technology”`
### HP iLO 4 CVE-2017-12542
`HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900`
### واجهة إدارة محول Lantronix ethernet بدون كلمة مرور
`"Press Enter for Setup Mode port:9999"`
### كلمات مرور Wi-Fi:
يساعد في العثور على كلمات مرور Wi-Fi بنص عادي في Shodan.
`html:"def_wirelesspassword"`
### مواقع Wordpress غير المهيأة بشكل صحيح:
الوصول إلى wp-config.php يمكن أن يعطي بيانات اعتماد قاعدة البيانات.
`http.html:"* The wp-config.php creation script uses this file"`
# Outlook Web Access:
### Exchange 2007
`"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"`
### Exchange 2010
`"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392`
### Exchange 2013 / 2016
`"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"`
### Lync / Skype for Business
`"X-MS-Server-Fqdn"`
# التخزين المتصل بالشبكة (NAS)
### مشاركات ملفات SMB (Samba)
ينتج حوالي 500,000 نتيجة... ضيق النطاق بإضافة "Documents" أو "Videos" إلخ.
`"Authentication: disabled" port:445`
### وحدات التحكم بالمجال تحديدًا:
`"Authentication: disabled" NETLOGON SYSVOL -unix port:445`
### المشاركات الافتراضية لملفات QuickBooks المقلقة:
`"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445`
### خوادم FTP مع تسجيل الدخول المجهول
`"220" "230 Login successful." port:21`
### أقراص NAS من Iomega / LenovoEMC
`"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"`
### أقراص NAS Buffalo TeraStation
`Redirecting sencha port:9000`
### خوادم Logitech Media
`"Server: Logitech Media Server" "200 OK"`
مثال: خوادم Logitech Media
### خوادم Plex Media
`"X-Plex-Protocol" "200 OK" port:32400`
### لوحات Tautulli / PlexPy
`"CherryPy/5.1.0" "/home"`
### USB متصل بجهاز التوجيه المنزلي
`"IPC$ all storage devices"`
# كاميرات الويب
### بحث عام عن الكاميرات
`title:camera`
### كاميرات الويب مع لقطات شاشة
`webcam has_screenshot:true`
### كاميرات الويب D-Link
`"d-Link Internet Camera, 200 OK"`
### Hipcam
`"Hipcam RealServer/V1.0"`
### Yawcams
`"Server: yawcam" "Mime-Type: text/html"`
### webcamXP/webcam7
`("webcam 7" OR "webcamXP") http.component:"mootools" -401`
### خادم كاميرا الويب IP Android
`"Server: IP Webcam Server" "200 OK"`
### مسجلات الفيديو الرقمية الأمنية
`html:"DVR_H264 ActiveX"`
### كاميرات المراقبة:
مع اسم المستخدم: admin وكلمة المرور: :P
`NETSurveillance uc-httpd`
`Server: uc-httpd 1.0.0`
# الطابعات والناسخات:
### طابعات HP
`"Serial Number:" "Built:" "Server: HP HTTP"`
### ناسخات/طابعات Xerox
`ssl:"Xerox Generic Root"`
### طابعات Epson
`"SERVER: EPSON_Linux UPnP" "200 OK"`
`"Server: EPSON-HTTP" "200 OK"`
### طابعات Canon
`"Server: KS_HTTP" "200 OK"`
`"Server: CANON HTTP Server"`
# الأجهزة المنزلية
### أجهزة الاستريو Yamaha
`"Server: AV_Receiver" "HTTP/1.1 406"`
### مستقبلات Apple AirPlay
Apple TV، HomePod، إلخ.
`"\x08_airplay" port:5353`
### Chromecast / أجهزة التلفاز الذكية
`"Chromecast:" port:8008`
### وحدات التحكم المنزلية الذكية Crestron
`"Model: PYNG-HUB"`
# أشياء عشوائية
### مكتبات Calibre
`"Server: calibre" http.status:200 http.title:calibre`
### وحدات تحكم طابعة ثلاثية الأبعاد OctoPrint
`title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944`
### أجهزة تعدين الإيثيريوم
`"ETH - Total speed"`
### قوائم أدلة Apache
استبدل .pem بأي امتداد أو اسم ملف مثل phpinfo.php.
`http.title:"Index of /" http.html:".pem"`
### WordPress غير مهيأ بشكل صحيح
ملفات wp-config.php المكشوفة التي تحتوي على بيانات اعتماد قاعدة البيانات.
`http.html:"* The wp-config.php creation script uses this file"`
### عدد كبير جدًا من خوادم Minecraft
`"Minecraft Server" "protocol 340" port:25565`
### حرفيًا كل شيء في كوريا الشمالية
`net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24`