nullfuzz-pentest/shodan-dorksShodan Dorks
Este repositorio de GitHub proporciona una variedad de consultas de búsqueda, conocidas como "dorks", para Shodan, una potente herramienta utilizada para buscar dispositivos conectados a Internet. Los dorks están diseñados para ayudar a los investigadores de seguridad a descubrir vulnerabilidades potenciales y problemas de configuración en varios tipos de dispositivos como cámaras web, enrutadores y servidores. Este recurso es útil para quienes están interesados en explorar la seguridad de redes y realizar escaneos de vulnerabilidades, tanto para principiantes como para profesionales experimentados en seguridad de la información. Al aprovechar este repositorio, los usuarios pueden mejorar la seguridad de sus propias redes y protegerse contra posibles ataques.
"TIBCO Spotfire Server"
title:"3ware"
title:"Acunetix"
title:"AddOnFinancePortal"
title:"Administration login" html:"poste
"220 Tornado-vxWorks"
3.1.3.150324
3Com 3CDaemon FTP
"ADI Convergence Galaxy"
'AFP'
app:"Keycloak"
"ArGoSoft FTP Server"
"Backdrop CMS"
BetaFTPD
"/bitrix/p3p.xml"
"BlackMoon FTP Server"
"BlackMoon FTP Server - Free Edition"
"Cerberus FTP Server"
"Check Point FireWall-1 Secure FTP"
"/Citrix/StoreWeb"
"Cleo VLProxy"
"Code-Crafters ftp"
"CommuniGate Pro FTP Server"
cpe:"cpe:2.3🅰️apache:http_server"
cpe:"cpe:2.3🅰️microsoft:sharepoint_server"
cpe:"cpe:2.3🅰️roundcube:webmail"
cpe:"cpe:2.3🅰️xiongmaitech:uc-httpd"
'cpe:"cpe:2.3⭕fortinet:fortios"'
cpe:"cpe:2.3⭕microsoft:windows_10_1903"
cpe:"cpe:2.3⭕microsoft:windows_server_2012"
"Device Identification: Schneider Electric"
"devtools.nestjs.com"
discovery: [suggested query]
"DiskStation FTP server ready"
'django'
dork for asset discovery
"DPTMMSG"
"Dumb FTP Server (dftpd)"
"EasyCoder FTP Server"
"Erlang OTP"
"EZNET_"
"Four-Faith"
"Freebox FTP Server"
"FTP ( BlackJumboDog"
"FTPD1 IBM FTP CS"
"FTP server (BSDI"
"FTP server (FirstClass"
"FTP server (Medusa Async"
"FTP server (NetBSD-ftpd"
"FTP Server (Oracle XML DB"
"FTP server (SunOS 5.6)"
"FTP server (SunOS 5.8)"
"FTP Server (ZyWALL"
"Ftp service of Jana-Server ready"
"Gene6 FTP Server"
"GlobalSCAPE Secure FTP Server"
"Global Site Selector FTP"
"Golden FTP Server Pro"
"Hewlett-Packard"
html:"a-blog cms"
html:"access MongoDB"
html:"acme-challenge"
html:"adrum"
html:"ADSB"
html:"airmedia"
html:"/airwatch/default.aspx"
html:"Akamai CloudTest"
html:"/apriso/"
html:"apriso"
html:"assetlinks.json"
html:"_astro"
html:"Avaya Aura® Utility Services"
html:"AWSEBDockerrunVersion"
html:"Backdrop CMS"
html:"Batflat"
html:"BeeStation"
html:"BentoML"
html:"/bitrix/"
html:"bootstrap-multiselect"
html:"browserconfig.xml"
html:"Casdoor"
html:"/ccmadmin/"
'html:"cdnjs.cloudflare.com/ajax/libs/bulma" || html:"unpkg.com/bulma" || html:"bulma.css" country:"DE"'
html:"cdn.mxpnl.com"
html:"/cgi-bin/cgiServer.exx"
html:"ChanCMS"
html:"Chatbot Arena"
html:"cloudflare/speedtest"
html:"CMSimple"
html:'content="Mattermost"'
html:'content="SLiMS'
html:'content="SLIMS'
html:"Couchbase"
html:""couchdb":"
html:"/+CSCOE+/logon.html"
html:"/css/osasiasp.css"
html:"Cyber Stealer - Secure Access"
html:"DD_RUM.init"
html:"Dependency-Track"
html:"D-Link Central WiFiManager"
html:"Docker Registry Browser"
html:"Doc/WebLogin.asp"
html:"draw.io"
html:"ENVIROMUX"
html:"eSlideManager - Login"
html:"eslintignore"
html:"ETIC Telecom"
'html:"ETQ Reliance"'
html:"ETQ Reliance"
html:"evertz.min.css"
html:"EyesOfNetwork"
html:"ForgeRock Identity Platform"
html:"/fort/login"
html:"foundation.min.css"
html:"foxcms-logo"
html:"_fs_org"
html:"Glimpse.axd"
html:"globalThis.BESZEL"
html:"GnuBoard5"
html:"grafana"
html:"graph_view.php" html:"cacti"
html:"gunicorn.conf.py"
html:"haproxy.cfg"
html:"hp/device/SignIn/Index"
html:"HPE" html:"OneView"
html:"HPE OfficeConnect"
html:"httpbingo.org"
html:"hyperdx"
html:"iboss-font.css"
html:"icinga" html:"Statistics"
html:"ICTBroadcast"
html:"InterMapper"
html:"invision community"
html:"iTop login"
html:"Jakefile"
html:"Journyx"
html:"K1000 Logo"
html:"kaswara"
html:"keybase.txt"
html:"LANDesk"
html:"Langflow"
html:"LDClient.initialize"
html:"liferayPortalCSS"
html:"Lighthouse Studio"
html:"lightstreamer"
html:"lighttpd.conf"
html:"Listmonk"
html:"/llms.txt"
html:"log4j.properties"
html:"Log in to dex"
html:"Login to Frappe"
html:"/logo_login.shtm"
html:"MagnusBilling"
'html:"MapProxy"'
html:"materialize.min.css"
html:"mcp.json"
html:"memtracker"
html:"meteor_runtime_config"
html:"MFC-L9570CDW"
html:"MiCollab End User Portal"
html:"Mitel" html:"MiCollab"
html:"MOLGENIS"
html:"/mstore-api/"
html:"next.config.js"
html:"Nexus Repository"
html:"NPLUG"
html:"ntfy.sh"
html:"nuxt.config.ts"
html:"OA_HTML"
html:"Odoo"
html:"OpenMRS"
html:"OpenPLC"
html:"Openspeedtest"
html:"/?op=registration" "OpenSSL"
html:"Optergy"
html:"osTicket"
html:"PEPLINK"
html:"Perforce"
html:"phpmyadmin"
html:"/plugins/duracelltomi-google-tag-manager/"
html:"/plugins/google-captcha"
html:"/plugins/megamenu"
html:"/plugins/newsletter/"
html:"/plugins/sg-cachepress/"
html:"/plugins/tutor/"
html:"/plugins/woocommerce-admin"
html:"/plugins/worker/"
html:"plugins/wpdirectorykit/"
html:"/plugins/wp-pagenavi/"
html:"pomerium"
html:"Portkey AI"
html:"posstaticfooter"
html:"PostgREST"
html:"posthog.init"
html:"postmaster_start_time"
html:"Powered by vtiger CRM"
html:"Proxmox = {"
html:"qdrant - vector search engine"
html:"redirect.pizza"
html:"redoc.standalone.js"
html:"RIoT Controller"
html:"Rocket LMS"
html:"Roxy-WI"
html:"RuoYi"
html:"ruxitagentjs"
html:"SAP NetWeaver Application Server Java"
html:"scoold-wrapper"
html:"sekolahku.web"
html:"semantic.min.css"
html:"Sentry.init"
html:"server-islands"
html:"SERVER_SIDE_FIDES_API_URL"
html:"setupconfig.xml"
html:"setup.py"
html:"Shibboleth"
html:"siam-convite"
html:"SickChill"
html:"simple-mobile-url-redirect"
html:"Site Not Found | Framer"
html:"SLIMS"
html:"SmarterMail"
html:"smtp_password"
html:"SonicWall" html:"SMA"
html:"/themes/astra/"
html:"TIBCO Managed"
html:"Tiny Tiny RSS"
html:"TiTiler"
html:"Mage"
html:"ProTop"
html:"<title>SuperTokens "
html:"tolgee"
html:"TOPdesk"
html:"TOTOLINK"
'html:"TRUfusion Enterprise"'
html:"/ucmuser/"
html:"UniFi Dream Machine SE"
html:"URVE Web Manager"
html:"var Liferay"
html:"veraCoreScreenHeight"
html:"vercel.json"
html:"voyager.min.js"
html:".vscode" html:"Directory listing for /"
html:"Vugex Framework"
html:"WAGO Ethernet Web-based Management"
html:"Watchguard" html:"Authentication Server"
html:"/web/cgi-bin/usbinfo.cgi"
html:"webui-centerpanel"
html:"Wekan"
html:"window.apos"
html:"wire:id"
html:"wp-content/plugins/cmp-coming-soon-maintenance"
html:"wp-content/plugins/download-manager/"
html:"/wp-content/plugins/gravityforms"
html:"wp-content/plugins/header-footer-elementor/"
html:"/wp-content/plugins/sitepress-multilingual-cms"
html:"wp-content/plugins/system-dashboard/"
html:"/wp-content/plugins/the-events-calendar/"
html:"wp-event-solution"
html:"WRN150"
html:"www.teccom-eu.net/wsdl"
html:"xstoremgwt"
html:"yeswiki"
html:"Yeti"
html:"ZimaOS"
html:"Zimbra Collaboration Suite Web Client"
html:"Zipline"
'http.component:"Apache Struts"'
http.component:"aurelia"
http.component:"cherrypy"
http.component:"Craft CMS"
http.component:"Discourse"
http.component:"django"
http.component:"Flask"
http.component:"joomla"
http.component:"lighttpd"
http.component:"Microsoft SharePoint"
http.component:"mochiweb" country:"US"
http.component:"Next.js"
http.component:"october cms"
http.component:"OpenCart"
http.component:"osCommerce"
http.component:"php"
http.component:"Plone"
http.component:"profilepress"
http.component:"roundcube"
http.component:"ServiceNow"
http.component:"sharepoint"
http.component:"Sharepoint"
http.component:"Shopify"
http.component:"SilverStripe"
http.component:"Squarespace"
http.component:"symfony"
http.component:"typo3"
http.component:"winstone servlet container"
http.component:"wordpress"
http.component:"WordPress"
http.component:"wordpress" http.html:"status-draft"
http.component:"wordpress" && http.html:"/wp-content/plugins/simple-user-registration/"
http.favicon.hash:1015186617
http.favicon.hash:-1033616879
http.favicon.hash:1111283449
http.favicon.hash:1163764264
http.favicon.hash:1185161484
http.favicon.hash:1192389544 port:3580
http.favicon.hash:"-1250474341"
http.favicon.hash:1253194620
http.favicon.hash:129457226
http.favicon.hash:-1338105374
http.favicon.hash:"-1381126564"
http.favicon.hash:-1410437493
http.favicon.hash:1436966696 http.html:"/css/archiver.css"
http.favicon.hash:-1445519482
http.favicon.hash:"1540720428"
http.favicon.hash:-1569311459
http.favicon.hash:"-165268926"
http.favicon.hash:1696974531
http.favicon.hash:-177043778
http.favicon.hash:-1889244460
http.favicon.hash:"1895809524"
http.favicon.hash:-1924700661
http.favicon.hash:-1952619005
http.favicon.hash:203612613
http.favicon.hash:-234487373
http.favicon.hash:-236105569
http.favicon.hash:252728887
http.favicon.hash:-268676052
http.favicon.hash:-282504889
http.favicon.hash:"284403119"
http.favicon.hash:-286484075 http.title:"Open WebUI"
http.favicon.hash:"362091310"
http.favicon.hash:385597939
http.favicon.hash:489905671
http.favicon.hash:-534530225
http.favicon.hash:-542502280
http.favicon.hash:-60395993
http.favicon.hash:-631002664
http.favicon.hash:"733091897"
http.favicon.hash:-741058468 "lighttpd/1.4.32"
http.favicon.hash:-742276344
http.favicon.hash:831854882
http.favicon.hash:-847792508
http.favicon.hash:-915768386
http.favicon.hash:"97378986"
http.headers_hash:1985490094
http.html:"Adfinity"
http.html:"Agent Development Kit Dev UI"
http.html:"Apollo Sandbox"
http.html:"astro"
http.html:"ASUSTOR"
'http.html:"AWStats"'
http.html:"backup-migration"
http.html:"BeyondTrust"
http.html:"bitrix"
http.html:"cdn.raygun.io"
http.html:"cgit"
http.html:"ChanCMS"
http.html:"cockpit"
http.html:"cockpit/static/login.css"
http.html:"Craft CMS"
http.html:"craftercms"
http.html:"CREATE TABLE" http.html:"SELECT"
http.html:"data-xwiki-reference"
http.html:"debug_kit"
http.html:"Docusaurus"
http.html:"EktronClientManager"
http.html:"embedpano"
http.html:"Expert Net Control"
http.html:"flDebugToolbar"
http.html:"Flock Admin"
http.html:"flutter_bootstrap.js"
http.html:"FreshRSS"
http.html:"ganglia_form.submit()"
'http.html_hash:1076109428 ssl.cert.issuer.cn:"IOS-Self-Signed-Certificate" port:8443'
"http.html_hash:-1466805544"
'http.html_hash:-1527157728 "Model: FMG-VM"'
http.html:"imgproxy"
http.html:"ImpressCMS"
http.html:"Index of" http.html:"sessions"
http.html:" itop login"
http.html:"klik_loginsystem"
http.html:"laminas"
http.html:"Line-TCPRS1"
http.html:"login to your cyberpanel account"
http.html:"LogRocket.init"
http.html:"matomo.js"
http.html:"/melis/MelisCms"
http.html:"MPDV"
http.html:"MyBB"
http.html:"N8n"
http.html:".node_repl_history"
http.html:".npmignore"
http.html:"</OAI-PMH"
http.html:"oceanwp" http.html:"woocommerce"
http.html:"Ollama" port:11434
http.html:"opencode"
http.html:"OpenProject"
http.html:"postman.json"
http.html:"Powered by phpcms"
http.html:".prettierignore"
http.html:"q:version"
http.html:"RailsAdmin"
http.html:"report server web portal"
http.html:"Request-Baskets"
http.html:"roadiz"
http.html:SAP Message Server
http.html:"Selenium Grid" "ready"
http.html:"seo-automatic-seo-tools"
http.html:"ServiceStack"
http.html:"SitecoSitecore Experience Platform"
'http.html:"SPIP"'
http.html:"static.hotjar.com"
http.html:"static.openreplay.com"
http.html:".stylelintignore"
http.html:"TOTOLINK"
'http.html:trx_addons'
http.html:"umbraco"
http.html:"UniFi OS"
http.html:"/VAADIN/"
http.html:"vben" || http.html:"vue-vben-admin"
http.html:"VictoriaMetrics"
http.html:"vtiger CRM"
http.html:"wc-multivendor-membership"
http.html:"window.frappe"
'http.html:"/wp-content/plugins/ai-engine/"'
http.html:"/wp-content/plugins/ditty-news-ticker/"
http.html:"wp-content/plugins/event-monster"
http.html:"/wp-content/plugins/fluentform/"
http.html:"/wp-content/plugins/give/"
http.html:"/wp-content/plugins/jeg-elementor-kit"
http.html:"/wp-content/plugins/learning-management-system/"
http.html:"/wp-content/plugins/learnpress"
http.html:"/wp-content/plugins/learnpress/"
http.html:"/wp-content/plugins/litespeed-cache/"
http.html:"wp-content/plugins/media-library-assistant"
http.html:"/wp-content/plugins/nd-booking"
http.html:"/wp-content/plugins/newsletter/"
http.html:"wp-content/plugins/post-timeline/"
http.html:"/wp-content/plugins/protect-wp-admin"
http.html:"/wp-content/plugins/sassy-social-share"
http.html:"/wp-content/plugins/seo-by-rank-math/"
http.html:"/wp-content/plugins/stop-user-enumeration/"
http.html:"/wp-content/plugins/the-events-calendar/"
http.html:"/wp-content/plugins/ultimate-faqs"
"http.html:/wp-content/plugins/ultimate-member/"
http.html:"/wp-content/plugins/woocommerce-abandoned-cart/"
http.html:"/wp-content/plugins/wpappninja"
'http.html:"wp-content/plugins/wp-automatic/"'
http.html:"/wp-content/plugins/wp-recall/"
http.html:"wp-google-maps"
http.html:"ypareo"
http.html:"zen-cart" || http.html:"Zen Cart"
http.html:"ZKTeco Security"
http.html:"zk.wpd" OR http.html:"<!-- ZK "
'http.title:"Adminer"'
http.title:"ADSelfService Plus"
http.title:"AJ-Report"
http.title:"Amatera App"
http.title:"Ambassador Diagnostic Overview"
http.title:"apache druid"
http.title:"Apache kafka"
http.title:"Apache Unomi"
http.title:"argo cd"
'http.title:"Artifactory"'
http.title:"beszel"
http.title:"biotime"
http.title:"bofamet"
'http.title:"Bonita" || "Server: Bonita"'
http.title:"Cascade CMS"
http.title:"Change Detection"
http.title:"ChirpStack LoRaWAN"
http.title:"churchcrm"
http.title:"Cisco Prime License Manager"
http.title:"Cisco Webex Meetings"
http.title:"citrix gateway" || title:"netscaler gateway"
http.title:"Cobbler Web Interface"
http.title:"ComfyUI"
http.title:"Content Server"
http.title:"Cortex XSOAR"
http.title:"Dagster"
http.title:"dbt Docs"
http.title:"DGN2200"
http.title:"Dify"
http.title:"EasyCVR"
'http.title:"eclipse birt home"'
http.title:"Electrolink"
'http.title:"elfinder"'
http.title:"elfinder"
'http.title:"Emerson Network Power IntelliSlot Web Card"'
http.title:"emlog"
'http.title:"ENIGMA NMS"'
http.title:"ESPHome"
http.title:"eureka"
http.title:"Feast Feature Store"
http.title:"File Exchange"
http.title:"FlexNet Login"
http.title:"Flower"
http.title:"Flowise"
http.title:"Flowise - Build AI Agents, Visually"
http.title:"Frigate"
http.title:"geoserver"
'http.title:"HedgeDoc - Ideas grow better together"'
http.title:'Home - Default Site'
http.title:"HOOBS"
http.title:"horizon daas"
http.title:"HP LaserJet"
http.title:"IBM Security Verify Access"
http.title:"IBM Spectrum"
http.title:"Ice Hrm Login"
'http.title:"IceWarp"'
http.title:"Index of" http.html:"CFIDE"
http.title:"Index of" http.html:"glpi"
'http.title:"InvoiceShelf"'
http.title:"ipTIME"
http.title:"irisnext"
http.title:"ITFlow"
http.title:"ivanti connect secure"
http.title:"Kanboard"
http.title:"LG LED Assistant"
'http.title:"LG LED Assistant" OR http.title:"LED Assistant"'
http.title:"LiquidFiles"
http.title:"Login | Zoraxy"
http.title:"Maltrail"
http.title:"manageengine"
http.title:"Meshery"
http.title:"Metabase" http.html:"setup"
'http.title:"Microweber"'
http.title:"minio console"
http.title:"Monsta FTP"
http.title:"Munin"
http.title:"Network Video Recorder Login"
http.title:"nginx ui"
http.title:"ngSurvey enterprise survey software"
http.title:"NocoDB"
http.title:"NocoDB" || http.favicon.hash:"-1123780655"
http.title:"Nordex Control - Wind Farm Portal"
http.title:"opensign"
http.title:"OpenVPN Access Server"
http.title:"OpManager"
http.title:"oracle peoplesoft enterprise"
http.title:"pgAdmin"
http.title:"phpMyAdmin"
'http.title:"phpMyFAQ"'
http.title:"Polycom HDX"
http.title:"pritunl"
http.title:"Prometheus Time Series"
http.title:"qnap"
http.title:"Redmine"
http.title:"reposilite"
http.title:"Sanity Studio"
http.title:"Seafile"
http.title:"SharePoint"
http.title:"Shibboleth IdP"
http.title:"Sign In - Gogs"
http.title:"SmarterMail"
http.title:"Sophos"
http.title:"Spark" http.html:"Environment"
http.title:"Stirling PDF"
http.title:"Symfony"
http.title:"T24 Sign in"
http.title:"temBoard"
http.title:"tenda wifi"
http.title:"ThingsBoard"
http.title:"Traefik"
http.title:"Traggo"
http.title:"Trust Center"
http.title:"Umbraco"
http.title:"Unified Communications Self Care Portal"
http.title:"Uptime Kuma"
http.title:"vlife"
http.title:"vrealize log insight"
'http.title:"VulnApp"'
'http.title:"Weblate"'
http.title:"Welcome to BlueMind"
http.title:"WNR614"
http.title:"woodpecker"
http.title:"WordPress" "graphql"
http.title:"Xymon"
http.title:"Zammad Helpdesk"
http.title:"Zimbra Collaboration Suite"
'http.title:"用友" "NC"'
http.title:"神行者路由"
"Hummingbird Ltd. (HCLFTPD)"
inurl:"/plugins/generic/tinymce/plugins/justboil.me/"
"Ipswitch-IMail"
"Java FTP Proxy Server"
"JD FTP Server Ready"
"LANIER MP 2555 FTP server"
"Mac OS X Server's FTP server"
Maverick_SSHD
"meteobridge"
"MiniUPnPd"
"mynodename"
"NcFTPd Server"
"NET Disk FTP Server ready"
"NETGEAR DGN"
"Network Management Card AOS"
nfs
"NTP"
"ntpsec"
"Nucleus FTP Server"
"OpenDreambox FTP service"
"Oracle Internet File System FTP"
"Oracle-iPlanet-Web-Server"
oracle port:1521
OrangeHRM
"PacketShaper FTP server"
"Personal FTP Server"
"Plesk"
port:1883 broker
port:22 "Debian"
port:"3389"
'port:44818 "Vendor ID: Rockwell Automation/Allen-Bradley"'
'port:4786 "Smart Install"'
port:4899 product:"Famatech Radmin"
port:502 "P34"
port:502 "P58"
port:52311 "BigFixHTTPServer"
port:53
port:5353
"port:7"
'port:8009 product:"Apache Tomcat"'
port:9100
'"Prefect" port:4200'
"PrNET FTP server"
product:"Allegro RomPager"
product:"check_mk"
product:cockroachdb
product:"Consul"
product:"Direct Connect P2P"
product:"Dovecot Pigeonhole sieve"
product:"Emby Media Server"
product:"FileZilla"
product:"FileZilla Server"
product:"Grafana"
product:"IronPort AsyncOS http config"
product:"Java Debug Wire Protocol"
product:"Java Message Service"
product:"Kyocera Printer Panel"
'product:"Microsoft ftpd"'
product:"MongoDB"
product:"NATS Server"
product:openclaw
product:"oracle weblogic"
product:"ProFTPD"
product:"Pure-FTPd"
product:"Pure-FTPd" version:"1.0.14"
product:"Pure-FTPd" version:"1.0.24"
product:"QNAP"
product:"redis"
product:"SAProuter"
product:"SNMP"
product:"SonicWALL Email Security"
product:"Titan FTP"
product:"Titan ftpd"
product:"Titan ftpd" version:"16.00.2672"
product:"Veritas Backup Exec"
product:"vnc"
product:"Vtun Virtual Tunnel"
product:"Weebly"
product:"WinRM"
"PROXY-FTP server"
"pSOSystem FTP server"
"/responsive-coming-soon/"
"RIEDEL Artist FTP Server"
"rlogin"
rocketmq port:"9876"
"sails.sid"
"Sambar FTP Server"
"Secure Gateway FTP server"
"Server: Apache/"
'"Server: Apache/" "centos"'
"Server: Aragorn Mitel"
'Server: Boa/0.94.13'
"Server:Cross Web Server"
'Server: cwpsrv'
"Server: Jetty"
"Server: magicinfo premium server"
'Server: MagicInfo Premium Server'
"Server: Mongoose"
'server:"ms .net remoting"'
"server:nginx"
"Server: nginx/"
"Server: squid/"
"Server: UserGate-UTM/42"
'Server: Virtual Web 0.9'
'Server: webswing.org'
"Server: ZEROF Web Server"
"Serv-U FTP Server"
'"Set-Cookie: APPSESSIONID=" "Path=/admin"'
"Set-Cookie: ips4"
"Set-Cookie: MEDDREAMSESSID"
"Sidewinder ftp proxy"
'SSH-2.0-Erlang'
"SSH-2.0-Serv-U"
ssl.cert.subject.cn:"cloud-object-storage.appdomain.cloud"
ssl:"cn=fortiweb"
'ssl:"Grandstream" "Set-Cookie: TRACKID"'
ssl:"ingress-nginx" port:8443
ssl:"ou=fortiswitch"
"storage.googleapis.com"
"system: port:123"
"text/event-stream"
The Avalaunch FTP system
"Titan FTP Server"
title:"123Solar"
title="ACMAILER4.0"
title:"ActiveMQ Artemis Console"
title:"AcuToWeb"
title:"Ad Hoc Transfer"
title:"Agent Zero"
title:"Airflow"
title:"AMR Printer Management"
title:"Apache StreamPark"
title:"Apache Tika"
title:"Applications Manager Login Screen"
title:"Arc for TM1"
title:"Aruba"
title:"AVAMAR"
title:"Bugzilla"
title:"Canon iR-ADV"
title:"CentreStack"
title:"cheat.sh"
title:"ChurchCRM"
title:"Cisco Finesse" port:8445
title:"Cockpit"
title:"DAEnetIP4"
'title:"Dagu"'
'title:"Datart"'
title:"DELMIA Apriso"
title:"Dkron"
title:"DKRON"
title:"D-Link"
title:dokploy
title:"D-Tale"
title:"EkoAPI Admin"
title:"eXist db"
title:"Expedition"
title:"eZ Server Monitor"
title:"F660"
title:"FileCatalyst"
title:"FlexPaper"
title:"FLIR"
title:"Flowise"
title:FortiRecorder
title:"FortiWeb - "
title:"FortiWLM Login"
title:"FUXA"
title:"Gerrit Code Review"
title:"Gitness"
title:"GLPI"
title:"GoAnywhere"
title:"Group-Office"
title:"HertzBeat"
title:"HiveServer2"
title:"iBarn"
title:"IBM Data Risk Manager"
title:"IBM Security Verify Access"
title:"idcCMS"
title:"imageRUNNER"
title:"index" html:".vscode"
title:"Intelbras"
title:"Jfrog"
title:"JHipster"
'title:"Joplin Server"'
title:"KACE Systems Management"
title:"Kong Manager"
title:"LabKey"
title:"Langflow"
title="Laser Printer"
title:"Leantime"
title:"MagicINFO"
title:"MailEnable"
title:"Mailpit"
title:"Memos"
title:"mindsdb"
title:"Miniweb Start Page"
title:"Mongoose"
title:"NAKIVO"
title:"netis router"
title:"NetScaler Console"
title:"NetScaler Gateway"
title:"NextChat"
title:"NextcloudPi"
title:"NextcloudPi Panel"
title:"Nexus Repository Manager"
title:"NUUO"
'title:"OFBiz"'
title:"OpenMetadata"
title:"OpenSearch"
title:"oracle access management"
'title:"Pacts"'
title:"Phoenix Contact - CHARX"
title:"PhotoPrism"
title:"PicHome"
title:"PowerJob"
title:"Rancher"
title:"Redis Commander"
title:"Remotely"
title:"RevPi"
title:"RustDesk API Admin"
title:"SaaS Composer"
title:"SAP Management Console"
title:"Scalar API Reference"
title:"SIMATIC 300"
title:"smtp4dev"
title:"spark master at"
title:"StrongShop"
title:"Supervisor Status"
title:"Theia IDE"
title:"TileServer-php"
'title:"TL-WR840N"'
title:"TOTOLINK"
'title:"TP-Link Router"'
title:"Traccar"
title:"UniFi OS"
title:"Unisphere"
title:"Usermin"
title:"VeloCloud"
title:"Vite App"
title:"Voyager"
title:"WAGO Ethernet Web-based Management"
title:"Wazuh"
title:"Weaviate"
title:"Weaviate Console"
title:"Welcome to the Apache Tika"
title:"Yii"
title:"zpan"
title:"Р7-Офис"
title:"用友"
"TP print service"
"Treck FTP server"
"TYPSoft FTP Server"
VMware vCenter Server
"vsFTPd"
'vuln:CVE-2023-40000'
"Welcome to Baby FTP Server"
'"Welcome to " "list of available commands" port:4244'
"Welcome to Network Camera FTP Server"
"Welcome to Pablo's FTP Server"
"Welcome to Pure-FTPd"
"Wind River FTP server"
"WordPress"
'wp-content/plugins/wp-simple-firewall/'
"X2 WS_FTP Server"
'x-amz-meta-s3cmd-attrs'
"X-Application-Context"
"X-backend-server"
"X-Backend-Server"
"x-envoy-peer-metadata"
"Xerver Free FTP Server"
"Xlight FTP Server"
"X-Magento-Tags"
"x-middleware-rewrite"
"X-OWA-Version"
'X-Powered-By: AdonisJs'
"X-Powered-By: PHP/"
'X-Served-By: cache'
"yeswiki"
"Z-FTP"
http.title:tinypilot
title:"hid - TinyPilot"
title:"tinypilot" -title:"Log In"
### city:
Encuentra dispositivos en una ciudad determinada.
`city:"Bangalore"`
### country:
Encuentra dispositivos en un país determinado.
`country:"IN"`
### geo:
Encuentra dispositivos proporcionando coordenadas geográficas.
`geo:"56.913055,118.250862"`
### Location
`country:us`
`country:ru country:de city:chicago`
### hostname:
Encuentra dispositivos que coincidan con el nombre de host.
`server: "gws" hostname:"google"`
`hostname:example.com -hostname:subdomain.example.com`
`hostname:example.com,example.org`
### net:
Encuentra dispositivos basados en una dirección IP o CIDR /x.
`net:210.214.0.0/16`
### Organization
`org:microsoft`
`org:"United States Department"`
### Número de Sistema Autónomo (ASN)
`asn:ASxxxx`
### os:
Encuentra dispositivos basados en el sistema operativo.
`os:"windows 7"`
### port:
Encuentra dispositivos basados en puertos abiertos.
`proftpd port:21`
### before/after:
Encuentra dispositivos antes o después de un tiempo determinado.
`apache after:22/02/2009 before:14/3/2010`
### Certificados SSL/TLS
Certificados autofirmados
`ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com`
Certificados caducados
`ssl.cert.expired:true`
`ssl.cert.subject.cn:example.com`
### Tipo de Dispositivo
`device:firewall`
`device:router`
`device:wap`
`device:webcam`
`device:media`
`device:"broadband router"`
`device:pbx`
`device:printer`
`device:switch`
`device:storage`
`device:specialized`
`device:phone`
`device:"voip"`
`device:"voip phone"`
`device:"voip adaptor"`
`device:"load balancer"`
`device:"print server"`
`device:terminal`
`device:remote`
`device:telecom`
`device:power`
`device:proxy`
`device:pda`
`device:bridge`
### Sistema Operativo
`os:"windows 7"`
`os:"windows server 2012"`
`os:"linux 3.x"`
### Producto
`product:apache`
`product:nginx`
`product:android`
`product:chromecast`
### Equipo del Cliente (CPE)
`cpe:apple`
`cpe:microsoft`
`cpe:nginx`
`cpe:cisco`
### Servidor
`server: nginx`
`server: apache`
`server: microsoft`
`server: cisco-ios`
### Huellas dactilares SSH
`dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0`
# Web
### Pulse Secure
`http.html:/dana-na`
### Certificados PEM
`http.title:"Index of /" http.html:".pem"`
### Sitios Tor / Dark Web
`onion-location`
# Bases de datos
### MySQL
`"product:MySQL"`
`mysql port:"3306"`
### MongoDB
`"product:MongoDB"`
`mongodb port:27017`
### MongoDBs completamente abiertos
`"MongoDB Server Information { "metrics":"`
`"Set-Cookie: mongo-express=" "200 OK"`
`"MongoDB Server Information" port:27017 -authentication`
### Paneles de Kibana sin autenticación
`kibana content-legth:217`
### elastic
`port:9200 json`
`port:"9200" all:elastic`
`port:"9200" all:"elastic indices"`
### Memcached
`"product:Memcached"`
### CouchDB
`"product:CouchDB"`
`port:"5984"+Server: "CouchDB/2.1.0"`
### PostgreSQL
`"port:5432 PostgreSQL"`
### Riak
`"port:8087 Riak"`
### Redis
`"product:Redis"`
### Cassandra
`"product:Cassandra"`
# Sistemas de Control Industrial
### Carteles Electrónicos Samsung
`"Server: Prismview Player"`
### Controladores de Bombas de Gasolinera
`"in-tank inventory" port:10001`
### Bombas de Combustible conectadas a Internet:
No se requiere autenticación para acceder al terminal CLI.
`"privileged command" GET`
### Lectores Automáticos de Matrículas
`P372 "ANPR enabled"`
### Controladores de Semáforos / Cámaras de Semáforo en Rojo
`mikrotik streetlight`
### Máquinas de Votación en Estados Unidos
"voter system serial" country:US
### Cajero Automático Abierto:
Puede permitir acceso al cajero.
`NCR Port:"161"`
### Operadores de Telecom con Interceptación Legal Cisco Wiretap
`"Cisco IOS" "ADVIPSERVICESK9_LI-M"`
### Teléfonos de Prisión
`"[2J[H Encartele Confidential"`
### Estado de Carga de Tesla PowerPack
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Cargadores de Vehículos Eléctricos
`"Server: gSOAP/2.8" "Content-Length: 583"`
### Satélites Marítimos
¡Shodan también creó un rastreador de barcos bastante bonito que mapea las ubicaciones de los barcos en tiempo real!
`"Cobham SATCOM" OR ("Sailor" "VSAT")`
### Paneles de Control de Misiones de Submarinos
`title:"Slocum Fleet Mission Control"`
### Unidades de Refrigeración CAREL PlantVisor
`"Server: CarelDataServer" "200 Document follows"`
### Parques Eólicos Nordex
`http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"`
### Rastreadores GPS Comerciales C4 Max
`"[1m[35mWelcome on console"`
### Máquinas de Rayos X Médicas DICOM
Protegidas por defecto, afortunadamente, pero estas más de 1.700 máquinas aún no deberían estar en Internet.
`"DICOM Server Response" port:104`
### Medidores Eléctricos GaugeTech
`"Server: EIG Embedded Web Server" "200 Document follows"`
### Automatización Industrial Siemens
`"Siemens, SIMATIC" port:161`
### Controladores HVAC Siemens
`"Server: Microsoft-WinCE" "Content-Length: 12581"`
### Controladores de Acceso a Puertas/Cerraderos
`"HID VertX" port:4070`
### Gestión Ferroviaria
`"log off" "select the appropriate"`
### Estado de Carga de Tesla Powerpack:
Ayuda a encontrar el estado de carga del Tesla Powerpack.
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Aerogenerador XZERES
`title:"xzeres wind"`
### Lector Automático de Matrículas PIPS
`"html:"PIPS Technology ALPR Processors""`
### Modbus
`"port:502"`
### Niagara Fox
`"port:1911,4911 product:Niagara"`
### GE-SRTP
`"port:18245,18246 product:"general electric""`
### MELSEC-Q
`"port:5006,5007 product:mitsubishi"`
### CODESYS
`"port:2455 operating system"`
### S7
`"port:102"`
### BACnet
`"port:47808"`
### HART-IP
`"port:5094 hart-ip"`
### Omron FINS
`"port:9600 response code"`
### IEC 60870-5-104
`"port:2404 asdu address"`
### DNP3
`"port:20000 source address"`
### EtherNet/IP
`"port:44818"`
### PCWorx
`"port:1962 PLC"`
### Crimson v3.0
`"port:789 product:"Red Lion Controls"`
### ProConOS
`"port:20547 PLC"`
# Escritorio Remoto
### VNC sin protección
`"authentication disabled" port:5900,5901`
`"authentication disabled" "RFB 003.008"`
### RDP de Windows
El 99.99% están protegidos por una pantalla de inicio de sesión secundaria de Windows.
`"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"`
# Infraestructura C2
### Servidores CobaltStrike
`product:"cobalt strike team server"`
`product:"Cobalt Strike Beacon"`
`ssl.cert.serial:146473198` \- número de serie del certificado predeterminado
`ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1`
`ssl:foren.zik`
### Brute Ratel
`http.html_hash:-1957161625`
`product:"Brute Ratel C4"`
### Covenant
`ssl:”Covenant” http.component:”Blazor”`
### Metasploit
`ssl:"MetasploitSelfSignedCA"`
# Infraestructura de Red
### Routers hackeados:
Routers que han sido comprometidos
`hacked-router-help-sos`
### Instancias Redis abiertas
`product:"Redis key-value store"`
### Citrix:
Encuentra Citrix Gateway.
`title:"citrix gateway"`
### Paneles de Weave Scope
Acceso a línea de comandos dentro de pods de Kubernetes y contenedores Docker, y visualización/monitoreo en tiempo real de toda la infraestructura.
`title:"Weave Scope" http.favicon.hash:567176827`
### Jenkins CI
`"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"`
### Jenkins:
Panel de Jenkins sin restricciones
`x-jenkins 200`
### APIs de Docker
`"Docker Containers:" port:2375`
### Registros Privados de Docker
`"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab`
### Servidores DNS abiertos de Pi-hole
`"dnsmasq-pi-hole" "Recursion: enabled"`
### Servidores DNS con recursividad
`"port: 53" Recursion: Enabled`
### Ya conectado como root vía Telnet
`"root@" port:23 -login -password -name -Session`
### Acceso Telnet:
No se requiere contraseña para acceso Telnet.
`port:23 console gateway`
### Shell sin autenticación en sistemas de videoconferencia Polycom
`"polycom command shell"`
### Dispositivos NPort serie a eth / MoCA sin contraseña
`nport -keyin port:23`
### Puentes Android Root
Un resultado tangencial del enfoque de actualizaciones fragmentado y descuidado de Google. 🙄 Más información aquí.
`"Android Debug Bridge" "Device" port:5555`
### Adaptador Serie a Ethernet Lantronix filtrando contraseñas Telnet
`Lantronix password port:30718 -secured`
### Citrix Virtual Apps
`"Citrix Applications:" port:1604`
### Cisco Smart Install
Vulnerable (en cierto modo "por diseño", pero especialmente cuando está expuesto).
`"smart install client active"`
### Gateways de Teléfonos IP PBX
`PBX "gateway console" -password port:23`
### Videoconferencias Polycom
`http.title:"- Polycom" "Server: lighttpd"`
`"Polycom Command Shell" -failed port:23`
### Configuración Telnet:
`"Polycom Command Shell" -failed port:23`
Ejemplo: Videoconferencia Polycom
### Portal de Ayuda Bomgar
`"Server: Bomgar" "200 OK"`
### Intel Active Management CVE-2017-5689
`"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995`
`”Active Management Technology”`
### HP iLO 4 CVE-2017-12542
`HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900`
### Interfaz de administración del adaptador Ethernet Lantronix sin contraseña
`"Press Enter for Setup Mode port:9999"`
### Contraseñas WiFi:
Ayuda a encontrar las contraseñas WiFi en texto claro en Shodan.
`html:"def_wirelesspassword"`
### Sitios WordPress mal configurados:
El archivo wp-config.php si se accede puede filtrar las credenciales de la base de datos.
`http.html:"* The wp-config.php creation script uses this file"`
# Outlook Web Access:
### Exchange 2007
`"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"`
### Exchange 2010
`"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392`
### Exchange 2013 / 2016
`"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"`
### Lync / Skype for Business
`"X-MS-Server-Fqdn"`
# Almacenamiento Conectado a la Red (NAS)
### Recursos Compartidos SMB (Samba)
Produce aproximadamente 500.000 resultados... reduce añadiendo "Documents" o "Videos", etc.
`"Authentication: disabled" port:445`
### Específicamente controladores de dominio:
`"Authentication: disabled" NETLOGON SYSVOL -unix port:445`
### Sobre los recursos compartidos de red predeterminados de archivos QuickBooks:
`"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445`
### Servidores FTP con inicio de sesión anónimo
`"220" "230 Login successful." port:21`
### Unidades NAS Iomega / LenovoEMC
`"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"`
### Unidades NAS Buffalo TeraStation
`Redirecting sencha port:9000`
### Servidores Multimedia Logitech
`"Server: Logitech Media Server" "200 OK"`
Ejemplo: Servidores Multimedia Logitech
### Servidores Multimedia Plex
`"X-Plex-Protocol" "200 OK" port:32400`
### Paneles de Tautulli / PlexPy
`"CherryPy/5.1.0" "/home"`
### USB adjunto al router doméstico
`"IPC$ all storage devices"`
# Cámaras Web
### Búsqueda genérica de cámaras
`title:camera`
### Cámaras web con capturas de pantalla
`webcam has_screenshot:true`
### Cámaras web D-Link
`"d-Link Internet Camera, 200 OK"`
### Hipcam
`"Hipcam RealServer/V1.0"`
### Yawcams
`"Server: yawcam" "Mime-Type: text/html"`
### webcamXP/webcam7
`("webcam 7" OR "webcamXP") http.component:"mootools" -401`
### Servidor de Cámara Web IP Android
`"Server: IP Webcam Server" "200 OK"`
### DVRs de Seguridad
`html:"DVR_H264 ActiveX"`
### Cámaras de Vigilancia:
Con usuario:admin y contraseña: :P
`NETSurveillance uc-httpd`
`Server: uc-httpd 1.0.0`
# Impresoras y Copiadoras:
### Impresoras HP
`"Serial Number:" "Built:" "Server: HP HTTP"`
### Copiadoras/Impresoras Xerox
`ssl:"Xerox Generic Root"`
### Impresoras Epson
`"SERVER: EPSON_Linux UPnP" "200 OK"`
`"Server: EPSON-HTTP" "200 OK"`
### Impresoras Canon
`"Server: KS_HTTP" "200 OK"`
`"Server: CANON HTTP Server"`
# Dispositivos Domésticos
### Equipos de Música Yamaha
`"Server: AV_Receiver" "HTTP/1.1 406"`
### Receptores Apple AirPlay
Apple TVs, HomePods, etc.
`"\x08_airplay" port:5353`
### Chromecasts / Smart TVs
`"Chromecast:" port:8008`
### Controladores Domóticos Crestron
`"Model: PYNG-HUB"`
# Cosas Aleatorias
### Bibliotecas Calibre
`"Server: calibre" http.status:200 http.title:calibre`
### Controladores de Impresoras 3D OctoPrint
`title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944`
### Mineros de Etherium
`"ETH - Total speed"`
### Listados de Directorios Apache
Sustituye .pem por cualquier extensión o un nombre de archivo como phpinfo.php.
`http.title:"Index of /" http.html:".pem"`
### WordPress mal configurado
Archivos wp-config.php expuestos que contienen credenciales de bases de datos.
`http.html:"* The wp-config.php creation script uses this file"`
### Demasiados Servidores Minecraft
`"Minecraft Server" "protocol 340" port:25565`
### Literalmente Todo en Corea del Norte
`net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24`