nullfuzz-pentest/shodan-dorksShodan Dorks
이 GitHub 저장소는 인터넷에 연결된 장치를 검색하는 강력한 도구인 Shodan을 위한 'dorks'라고 알려진 다양한 검색 쿼리를 제공합니다. 이러한 dorks는 보안 연구자들이 웹캠, 라우터, 서버와 같은 다양한 유형의 장치에서 잠재적인 취약점과 구성 문제를 발견할 수 있도록 설계되었습니다. 이 리소스는 네트워크 보안을 탐구하고 취약점 스캐닝을 수행하는 데 관심이 있는 초보자 및 경험 많은 정보 보안 전문가 모두에게 유용합니다. 이 저장소를 활용함으로써 사용자는 자신의 네트워크 보안을 개선하고 잠재적인 공격으로부터 보호할 수 있습니다.
"TIBCO Spotfire Server"
title:"3ware"
title:"Acunetix"
title:"AddOnFinancePortal"
title:"Administration login" html:"poste
"220 Tornado-vxWorks"
3.1.3.150324
3Com 3CDaemon FTP
"ADI Convergence Galaxy"
'AFP'
app:"Keycloak"
"ArGoSoft FTP Server"
"Backdrop CMS"
BetaFTPD
"/bitrix/p3p.xml"
"BlackMoon FTP Server"
"BlackMoon FTP Server - Free Edition"
"Cerberus FTP Server"
"Check Point FireWall-1 Secure FTP"
"/Citrix/StoreWeb"
"Cleo VLProxy"
"Code-Crafters ftp"
"CommuniGate Pro FTP Server"
cpe:"cpe:2.3🅰️apache:http_server"
cpe:"cpe:2.3🅰️microsoft:sharepoint_server"
cpe:"cpe:2.3🅰️roundcube:webmail"
cpe:"cpe:2.3🅰️xiongmaitech:uc-httpd"
'cpe:"cpe:2.3⭕fortinet:fortios"'
cpe:"cpe:2.3⭕microsoft:windows_10_1903"
cpe:"cpe:2.3⭕microsoft:windows_server_2012"
"Device Identification: Schneider Electric"
"devtools.nestjs.com"
discovery: [suggested query]
"DiskStation FTP server ready"
'django'
dork for asset discovery
"DPTMMSG"
"Dumb FTP Server (dftpd)"
"EasyCoder FTP Server"
"Erlang OTP"
"EZNET_"
"Four-Faith"
"Freebox FTP Server"
"FTP ( BlackJumboDog"
"FTPD1 IBM FTP CS"
"FTP server (BSDI"
"FTP server (FirstClass"
"FTP server (Medusa Async"
"FTP server (NetBSD-ftpd"
"FTP Server (Oracle XML DB"
"FTP server (SunOS 5.6)"
"FTP server (SunOS 5.8)"
"FTP Server (ZyWALL"
"Ftp service of Jana-Server ready"
"Gene6 FTP Server"
"GlobalSCAPE Secure FTP Server"
"Global Site Selector FTP"
"Golden FTP Server Pro"
"Hewlett-Packard"
html:"a-blog cms"
html:"access MongoDB"
html:"acme-challenge"
html:"adrum"
html:"ADSB"
html:"airmedia"
html:"/airwatch/default.aspx"
html:"Akamai CloudTest"
html:"/apriso/"
html:"apriso"
html:"assetlinks.json"
html:"_astro"
html:"Avaya Aura® Utility Services"
html:"AWSEBDockerrunVersion"
html:"Backdrop CMS"
html:"Batflat"
html:"BeeStation"
html:"BentoML"
html:"/bitrix/"
html:"bootstrap-multiselect"
html:"browserconfig.xml"
html:"Casdoor"
html:"/ccmadmin/"
'html:"cdnjs.cloudflare.com/ajax/libs/bulma" || html:"unpkg.com/bulma" || html:"bulma.css" country:"DE"'
html:"cdn.mxpnl.com"
html:"/cgi-bin/cgiServer.exx"
html:"ChanCMS"
html:"Chatbot Arena"
html:"cloudflare/speedtest"
html:"CMSimple"
html:'content="Mattermost"'
html:'content="SLiMS'
html:'content="SLIMS'
html:"Couchbase"
html:""couchdb":"
html:"/+CSCOE+/logon.html"
html:"/css/osasiasp.css"
html:"Cyber Stealer - Secure Access"
html:"DD_RUM.init"
html:"Dependency-Track"
html:"D-Link Central WiFiManager"
html:"Docker Registry Browser"
html:"Doc/WebLogin.asp"
html:"draw.io"
html:"ENVIROMUX"
html:"eSlideManager - Login"
html:"eslintignore"
html:"ETIC Telecom"
'html:"ETQ Reliance"'
html:"ETQ Reliance"
html:"evertz.min.css"
html:"EyesOfNetwork"
html:"ForgeRock Identity Platform"
html:"/fort/login"
html:"foundation.min.css"
html:"foxcms-logo"
html:"_fs_org"
html:"Glimpse.axd"
html:"globalThis.BESZEL"
html:"GnuBoard5"
html:"grafana"
html:"graph_view.php" html:"cacti"
html:"gunicorn.conf.py"
html:"haproxy.cfg"
html:"hp/device/SignIn/Index"
html:"HPE" html:"OneView"
html:"HPE OfficeConnect"
html:"httpbingo.org"
html:"hyperdx"
html:"iboss-font.css"
html:"icinga" html:"Statistics"
html:"ICTBroadcast"
html:"InterMapper"
html:"invision community"
html:"iTop login"
html:"Jakefile"
html:"Journyx"
html:"K1000 Logo"
html:"kaswara"
html:"keybase.txt"
html:"LANDesk"
html:"Langflow"
html:"LDClient.initialize"
html:"liferayPortalCSS"
html:"Lighthouse Studio"
html:"lightstreamer"
html:"lighttpd.conf"
html:"Listmonk"
html:"/llms.txt"
html:"log4j.properties"
html:"Log in to dex"
html:"Login to Frappe"
html:"/logo_login.shtm"
html:"MagnusBilling"
'html:"MapProxy"'
html:"materialize.min.css"
html:"mcp.json"
html:"memtracker"
html:"meteor_runtime_config"
html:"MFC-L9570CDW"
html:"MiCollab End User Portal"
html:"Mitel" html:"MiCollab"
html:"MOLGENIS"
html:"/mstore-api/"
html:"next.config.js"
html:"Nexus Repository"
html:"NPLUG"
html:"ntfy.sh"
html:"nuxt.config.ts"
html:"OA_HTML"
html:"Odoo"
html:"OpenMRS"
html:"OpenPLC"
html:"Openspeedtest"
html:"/?op=registration" "OpenSSL"
html:"Optergy"
html:"osTicket"
html:"PEPLINK"
html:"Perforce"
html:"phpmyadmin"
html:"/plugins/duracelltomi-google-tag-manager/"
html:"/plugins/google-captcha"
html:"/plugins/megamenu"
html:"/plugins/newsletter/"
html:"/plugins/sg-cachepress/"
html:"/plugins/tutor/"
html:"/plugins/woocommerce-admin"
html:"/plugins/worker/"
html:"plugins/wpdirectorykit/"
html:"/plugins/wp-pagenavi/"
html:"pomerium"
html:"Portkey AI"
html:"posstaticfooter"
html:"PostgREST"
html:"posthog.init"
html:"postmaster_start_time"
html:"Powered by vtiger CRM"
html:"Proxmox = {"
html:"qdrant - vector search engine"
html:"redirect.pizza"
html:"redoc.standalone.js"
html:"RIoT Controller"
html:"Rocket LMS"
html:"Roxy-WI"
html:"RuoYi"
html:"ruxitagentjs"
html:"SAP NetWeaver Application Server Java"
html:"scoold-wrapper"
html:"sekolahku.web"
html:"semantic.min.css"
html:"Sentry.init"
html:"server-islands"
html:"SERVER_SIDE_FIDES_API_URL"
html:"setupconfig.xml"
html:"setup.py"
html:"Shibboleth"
html:"siam-convite"
html:"SickChill"
html:"simple-mobile-url-redirect"
html:"Site Not Found | Framer"
html:"SLIMS"
html:"SmarterMail"
html:"smtp_password"
html:"SonicWall" html:"SMA"
html:"/themes/astra/"
html:"TIBCO Managed"
html:"Tiny Tiny RSS"
html:"TiTiler"
html:"Mage"
html:"ProTop"
html:"<title>SuperTokens "
html:"tolgee"
html:"TOPdesk"
html:"TOTOLINK"
'html:"TRUfusion Enterprise"'
html:"/ucmuser/"
html:"UniFi Dream Machine SE"
html:"URVE Web Manager"
html:"var Liferay"
html:"veraCoreScreenHeight"
html:"vercel.json"
html:"voyager.min.js"
html:".vscode" html:"Directory listing for /"
html:"Vugex Framework"
html:"WAGO Ethernet Web-based Management"
html:"Watchguard" html:"Authentication Server"
html:"/web/cgi-bin/usbinfo.cgi"
html:"webui-centerpanel"
html:"Wekan"
html:"window.apos"
html:"wire:id"
html:"wp-content/plugins/cmp-coming-soon-maintenance"
html:"wp-content/plugins/download-manager/"
html:"/wp-content/plugins/gravityforms"
html:"wp-content/plugins/header-footer-elementor/"
html:"/wp-content/plugins/sitepress-multilingual-cms"
html:"wp-content/plugins/system-dashboard/"
html:"/wp-content/plugins/the-events-calendar/"
html:"wp-event-solution"
html:"WRN150"
html:"www.teccom-eu.net/wsdl"
html:"xstoremgwt"
html:"yeswiki"
html:"Yeti"
html:"ZimaOS"
html:"Zimbra Collaboration Suite Web Client"
html:"Zipline"
'http.component:"Apache Struts"'
http.component:"aurelia"
http.component:"cherrypy"
http.component:"Craft CMS"
http.component:"Discourse"
http.component:"django"
http.component:"Flask"
http.component:"joomla"
http.component:"lighttpd"
http.component:"Microsoft SharePoint"
http.component:"mochiweb" country:"US"
http.component:"Next.js"
http.component:"october cms"
http.component:"OpenCart"
http.component:"osCommerce"
http.component:"php"
http.component:"Plone"
http.component:"profilepress"
http.component:"roundcube"
http.component:"ServiceNow"
http.component:"sharepoint"
http.component:"Sharepoint"
http.component:"Shopify"
http.component:"SilverStripe"
http.component:"Squarespace"
http.component:"symfony"
http.component:"typo3"
http.component:"winstone servlet container"
http.component:"wordpress"
http.component:"WordPress"
http.component:"wordpress" http.html:"status-draft"
http.component:"wordpress" && http.html:"/wp-content/plugins/simple-user-registration/"
http.favicon.hash:1015186617
http.favicon.hash:-1033616879
http.favicon.hash:1111283449
http.favicon.hash:1163764264
http.favicon.hash:1185161484
http.favicon.hash:1192389544 port:3580
http.favicon.hash:"-1250474341"
http.favicon.hash:1253194620
http.favicon.hash:129457226
http.favicon.hash:-1338105374
http.favicon.hash:"-1381126564"
http.favicon.hash:-1410437493
http.favicon.hash:1436966696 http.html:"/css/archiver.css"
http.favicon.hash:-1445519482
http.favicon.hash:"1540720428"
http.favicon.hash:-1569311459
http.favicon.hash:"-165268926"
http.favicon.hash:1696974531
http.favicon.hash:-177043778
http.favicon.hash:-1889244460
http.favicon.hash:"1895809524"
http.favicon.hash:-1924700661
http.favicon.hash:-1952619005
http.favicon.hash:203612613
http.favicon.hash:-234487373
http.favicon.hash:-236105569
http.favicon.hash:252728887
http.favicon.hash:-268676052
http.favicon.hash:-282504889
http.favicon.hash:"284403119"
http.favicon.hash:-286484075 http.title:"Open WebUI"
http.favicon.hash:"362091310"
http.favicon.hash:385597939
http.favicon.hash:489905671
http.favicon.hash:-534530225
http.favicon.hash:-542502280
http.favicon.hash:-60395993
http.favicon.hash:-631002664
http.favicon.hash:"733091897"
http.favicon.hash:-741058468 "lighttpd/1.4.32"
http.favicon.hash:-742276344
http.favicon.hash:831854882
http.favicon.hash:-847792508
http.favicon.hash:-915768386
http.favicon.hash:"97378986"
http.headers_hash:1985490094
http.html:"Adfinity"
http.html:"Agent Development Kit Dev UI"
http.html:"Apollo Sandbox"
http.html:"astro"
http.html:"ASUSTOR"
'http.html:"AWStats"'
http.html:"backup-migration"
http.html:"BeyondTrust"
http.html:"bitrix"
http.html:"cdn.raygun.io"
http.html:"cgit"
http.html:"ChanCMS"
http.html:"cockpit"
http.html:"cockpit/static/login.css"
http.html:"Craft CMS"
http.html:"craftercms"
http.html:"CREATE TABLE" http.html:"SELECT"
http.html:"data-xwiki-reference"
http.html:"debug_kit"
http.html:"Docusaurus"
http.html:"EktronClientManager"
http.html:"embedpano"
http.html:"Expert Net Control"
http.html:"flDebugToolbar"
http.html:"Flock Admin"
http.html:"flutter_bootstrap.js"
http.html:"FreshRSS"
http.html:"ganglia_form.submit()"
'http.html_hash:1076109428 ssl.cert.issuer.cn:"IOS-Self-Signed-Certificate" port:8443'
"http.html_hash:-1466805544"
'http.html_hash:-1527157728 "Model: FMG-VM"'
http.html:"imgproxy"
http.html:"ImpressCMS"
http.html:"Index of" http.html:"sessions"
http.html:" itop login"
http.html:"klik_loginsystem"
http.html:"laminas"
http.html:"Line-TCPRS1"
http.html:"login to your cyberpanel account"
http.html:"LogRocket.init"
http.html:"matomo.js"
http.html:"/melis/MelisCms"
http.html:"MPDV"
http.html:"MyBB"
http.html:"N8n"
http.html:".node_repl_history"
http.html:".npmignore"
http.html:"</OAI-PMH"
http.html:"oceanwp" http.html:"woocommerce"
http.html:"Ollama" port:11434
http.html:"opencode"
http.html:"OpenProject"
http.html:"postman.json"
http.html:"Powered by phpcms"
http.html:".prettierignore"
http.html:"q:version"
http.html:"RailsAdmin"
http.html:"report server web portal"
http.html:"Request-Baskets"
http.html:"roadiz"
http.html:SAP Message Server
http.html:"Selenium Grid" "ready"
http.html:"seo-automatic-seo-tools"
http.html:"ServiceStack"
http.html:"SitecoSitecore Experience Platform"
'http.html:"SPIP"'
http.html:"static.hotjar.com"
http.html:"static.openreplay.com"
http.html:".stylelintignore"
http.html:"TOTOLINK"
'http.html:trx_addons'
http.html:"umbraco"
http.html:"UniFi OS"
http.html:"/VAADIN/"
http.html:"vben" || http.html:"vue-vben-admin"
http.html:"VictoriaMetrics"
http.html:"vtiger CRM"
http.html:"wc-multivendor-membership"
http.html:"window.frappe"
'http.html:"/wp-content/plugins/ai-engine/"'
http.html:"/wp-content/plugins/ditty-news-ticker/"
http.html:"wp-content/plugins/event-monster"
http.html:"/wp-content/plugins/fluentform/"
http.html:"/wp-content/plugins/give/"
http.html:"/wp-content/plugins/jeg-elementor-kit"
http.html:"/wp-content/plugins/learning-management-system/"
http.html:"/wp-content/plugins/learnpress"
http.html:"/wp-content/plugins/learnpress/"
http.html:"/wp-content/plugins/litespeed-cache/"
http.html:"wp-content/plugins/media-library-assistant"
http.html:"/wp-content/plugins/nd-booking"
http.html:"/wp-content/plugins/newsletter/"
http.html:"wp-content/plugins/post-timeline/"
http.html:"/wp-content/plugins/protect-wp-admin"
http.html:"/wp-content/plugins/sassy-social-share"
http.html:"/wp-content/plugins/seo-by-rank-math/"
http.html:"/wp-content/plugins/stop-user-enumeration/"
http.html:"/wp-content/plugins/the-events-calendar/"
http.html:"/wp-content/plugins/ultimate-faqs"
"http.html:/wp-content/plugins/ultimate-member/"
http.html:"/wp-content/plugins/woocommerce-abandoned-cart/"
http.html:"/wp-content/plugins/wpappninja"
'http.html:"wp-content/plugins/wp-automatic/"'
http.html:"/wp-content/plugins/wp-recall/"
http.html:"wp-google-maps"
http.html:"ypareo"
http.html:"zen-cart" || http.html:"Zen Cart"
http.html:"ZKTeco Security"
http.html:"zk.wpd" OR http.html:"<!-- ZK "
'http.title:"Adminer"'
http.title:"ADSelfService Plus"
http.title:"AJ-Report"
http.title:"Amatera App"
http.title:"Ambassador Diagnostic Overview"
http.title:"apache druid"
http.title:"Apache kafka"
http.title:"Apache Unomi"
http.title:"argo cd"
'http.title:"Artifactory"'
http.title:"beszel"
http.title:"biotime"
http.title:"bofamet"
'http.title:"Bonita" || "Server: Bonita"'
http.title:"Cascade CMS"
http.title:"Change Detection"
http.title:"ChirpStack LoRaWAN"
http.title:"churchcrm"
http.title:"Cisco Prime License Manager"
http.title:"Cisco Webex Meetings"
http.title:"citrix gateway" || title:"netscaler gateway"
http.title:"Cobbler Web Interface"
http.title:"ComfyUI"
http.title:"Content Server"
http.title:"Cortex XSOAR"
http.title:"Dagster"
http.title:"dbt Docs"
http.title:"DGN2200"
http.title:"Dify"
http.title:"EasyCVR"
'http.title:"eclipse birt home"'
http.title:"Electrolink"
'http.title:"elfinder"'
http.title:"elfinder"
'http.title:"Emerson Network Power IntelliSlot Web Card"'
http.title:"emlog"
'http.title:"ENIGMA NMS"'
http.title:"ESPHome"
http.title:"eureka"
http.title:"Feast Feature Store"
http.title:"File Exchange"
http.title:"FlexNet Login"
http.title:"Flower"
http.title:"Flowise"
http.title:"Flowise - Build AI Agents, Visually"
http.title:"Frigate"
http.title:"geoserver"
'http.title:"HedgeDoc - Ideas grow better together"'
http.title:'Home - Default Site'
http.title:"HOOBS"
http.title:"horizon daas"
http.title:"HP LaserJet"
http.title:"IBM Security Verify Access"
http.title:"IBM Spectrum"
http.title:"Ice Hrm Login"
'http.title:"IceWarp"'
http.title:"Index of" http.html:"CFIDE"
http.title:"Index of" http.html:"glpi"
'http.title:"InvoiceShelf"'
http.title:"ipTIME"
http.title:"irisnext"
http.title:"ITFlow"
http.title:"ivanti connect secure"
http.title:"Kanboard"
http.title:"LG LED Assistant"
'http.title:"LG LED Assistant" OR http.title:"LED Assistant"'
http.title:"LiquidFiles"
http.title:"Login | Zoraxy"
http.title:"Maltrail"
http.title:"manageengine"
http.title:"Meshery"
http.title:"Metabase" http.html:"setup"
'http.title:"Microweber"'
http.title:"minio console"
http.title:"Monsta FTP"
http.title:"Munin"
http.title:"Network Video Recorder Login"
http.title:"nginx ui"
http.title:"ngSurvey enterprise survey software"
http.title:"NocoDB"
http.title:"NocoDB" || http.favicon.hash:"-1123780655"
http.title:"Nordex Control - Wind Farm Portal"
http.title:"opensign"
http.title:"OpenVPN Access Server"
http.title:"OpManager"
http.title:"oracle peoplesoft enterprise"
http.title:"pgAdmin"
http.title:"phpMyAdmin"
'http.title:"phpMyFAQ"'
http.title:"Polycom HDX"
http.title:"pritunl"
http.title:"Prometheus Time Series"
http.title:"qnap"
http.title:"Redmine"
http.title:"reposilite"
http.title:"Sanity Studio"
http.title:"Seafile"
http.title:"SharePoint"
http.title:"Shibboleth IdP"
http.title:"Sign In - Gogs"
http.title:"SmarterMail"
http.title:"Sophos"
http.title:"Spark" http.html:"Environment"
http.title:"Stirling PDF"
http.title:"Symfony"
http.title:"T24 Sign in"
http.title:"temBoard"
http.title:"tenda wifi"
http.title:"ThingsBoard"
http.title:"Traefik"
http.title:"Traggo"
http.title:"Trust Center"
http.title:"Umbraco"
http.title:"Unified Communications Self Care Portal"
http.title:"Uptime Kuma"
http.title:"vlife"
http.title:"vrealize log insight"
'http.title:"VulnApp"'
'http.title:"Weblate"'
http.title:"Welcome to BlueMind"
http.title:"WNR614"
http.title:"woodpecker"
http.title:"WordPress" "graphql"
http.title:"Xymon"
http.title:"Zammad Helpdesk"
http.title:"Zimbra Collaboration Suite"
'http.title:"用友" "NC"'
http.title:"神行者路由"
"Hummingbird Ltd. (HCLFTPD)"
inurl:"/plugins/generic/tinymce/plugins/justboil.me/"
"Ipswitch-IMail"
"Java FTP Proxy Server"
"JD FTP Server Ready"
"LANIER MP 2555 FTP server"
"Mac OS X Server's FTP server"
Maverick_SSHD
"meteobridge"
"MiniUPnPd"
"mynodename"
"NcFTPd Server"
"NET Disk FTP Server ready"
"NETGEAR DGN"
"Network Management Card AOS"
nfs
"NTP"
"ntpsec"
"Nucleus FTP Server"
"OpenDreambox FTP service"
"Oracle Internet File System FTP"
"Oracle-iPlanet-Web-Server"
oracle port:1521
OrangeHRM
"PacketShaper FTP server"
"Personal FTP Server"
"Plesk"
port:1883 broker
port:22 "Debian"
port:"3389"
'port:44818 "Vendor ID: Rockwell Automation/Allen-Bradley"'
'port:4786 "Smart Install"'
port:4899 product:"Famatech Radmin"
port:502 "P34"
port:502 "P58"
port:52311 "BigFixHTTPServer"
port:53
port:5353
"port:7"
'port:8009 product:"Apache Tomcat"'
port:9100
'"Prefect" port:4200'
"PrNET FTP server"
product:"Allegro RomPager"
product:"check_mk"
product:cockroachdb
product:"Consul"
product:"Direct Connect P2P"
product:"Dovecot Pigeonhole sieve"
product:"Emby Media Server"
product:"FileZilla"
product:"FileZilla Server"
product:"Grafana"
product:"IronPort AsyncOS http config"
product:"Java Debug Wire Protocol"
product:"Java Message Service"
product:"Kyocera Printer Panel"
'product:"Microsoft ftpd"'
product:"MongoDB"
product:"NATS Server"
product:openclaw
product:"oracle weblogic"
product:"ProFTPD"
product:"Pure-FTPd"
product:"Pure-FTPd" version:"1.0.14"
product:"Pure-FTPd" version:"1.0.24"
product:"QNAP"
product:"redis"
product:"SAProuter"
product:"SNMP"
product:"SonicWALL Email Security"
product:"Titan FTP"
product:"Titan ftpd"
product:"Titan ftpd" version:"16.00.2672"
product:"Veritas Backup Exec"
product:"vnc"
product:"Vtun Virtual Tunnel"
product:"Weebly"
product:"WinRM"
"PROXY-FTP server"
"pSOSystem FTP server"
"/responsive-coming-soon/"
"RIEDEL Artist FTP Server"
"rlogin"
rocketmq port:"9876"
"sails.sid"
"Sambar FTP Server"
"Secure Gateway FTP server"
"Server: Apache/"
'"Server: Apache/" "centos"'
"Server: Aragorn Mitel"
'Server: Boa/0.94.13'
"Server:Cross Web Server"
'Server: cwpsrv'
"Server: Jetty"
"Server: magicinfo premium server"
'Server: MagicInfo Premium Server'
"Server: Mongoose"
'server:"ms .net remoting"'
"server:nginx"
"Server: nginx/"
"Server: squid/"
"Server: UserGate-UTM/42"
'Server: Virtual Web 0.9'
'Server: webswing.org'
"Server: ZEROF Web Server"
"Serv-U FTP Server"
'"Set-Cookie: APPSESSIONID=" "Path=/admin"'
"Set-Cookie: ips4"
"Set-Cookie: MEDDREAMSESSID"
"Sidewinder ftp proxy"
'SSH-2.0-Erlang'
"SSH-2.0-Serv-U"
ssl.cert.subject.cn:"cloud-object-storage.appdomain.cloud"
ssl:"cn=fortiweb"
'ssl:"Grandstream" "Set-Cookie: TRACKID"'
ssl:"ingress-nginx" port:8443
ssl:"ou=fortiswitch"
"storage.googleapis.com"
"system: port:123"
"text/event-stream"
The Avalaunch FTP system
"Titan FTP Server"
title:"123Solar"
title="ACMAILER4.0"
title:"ActiveMQ Artemis Console"
title:"AcuToWeb"
title:"Ad Hoc Transfer"
title:"Agent Zero"
title:"Airflow"
title:"AMR Printer Management"
title:"Apache StreamPark"
title:"Apache Tika"
title:"Applications Manager Login Screen"
title:"Arc for TM1"
title:"Aruba"
title:"AVAMAR"
title:"Bugzilla"
title:"Canon iR-ADV"
title:"CentreStack"
title:"cheat.sh"
title:"ChurchCRM"
title:"Cisco Finesse" port:8445
title:"Cockpit"
title:"DAEnetIP4"
'title:"Dagu"'
'title:"Datart"'
title:"DELMIA Apriso"
title:"Dkron"
title:"DKRON"
title:"D-Link"
title:dokploy
title:"D-Tale"
title:"EkoAPI Admin"
title:"eXist db"
title:"Expedition"
title:"eZ Server Monitor"
title:"F660"
title:"FileCatalyst"
title:"FlexPaper"
title:"FLIR"
title:"Flowise"
title:FortiRecorder
title:"FortiWeb - "
title:"FortiWLM Login"
title:"FUXA"
title:"Gerrit Code Review"
title:"Gitness"
title:"GLPI"
title:"GoAnywhere"
title:"Group-Office"
title:"HertzBeat"
title:"HiveServer2"
title:"iBarn"
title:"IBM Data Risk Manager"
title:"IBM Security Verify Access"
title:"idcCMS"
title:"imageRUNNER"
title:"index" html:".vscode"
title:"Intelbras"
title:"Jfrog"
title:"JHipster"
'title:"Joplin Server"'
title:"KACE Systems Management"
title:"Kong Manager"
title:"LabKey"
title:"Langflow"
title="Laser Printer"
title:"Leantime"
title:"MagicINFO"
title:"MailEnable"
title:"Mailpit"
title:"Memos"
title:"mindsdb"
title:"Miniweb Start Page"
title:"Mongoose"
title:"NAKIVO"
title:"netis router"
title:"NetScaler Console"
title:"NetScaler Gateway"
title:"NextChat"
title:"NextcloudPi"
title:"NextcloudPi Panel"
title:"Nexus Repository Manager"
title:"NUUO"
'title:"OFBiz"'
title:"OpenMetadata"
title:"OpenSearch"
title:"oracle access management"
'title:"Pacts"'
title:"Phoenix Contact - CHARX"
title:"PhotoPrism"
title:"PicHome"
title:"PowerJob"
title:"Rancher"
title:"Redis Commander"
title:"Remotely"
title:"RevPi"
title:"RustDesk API Admin"
title:"SaaS Composer"
title:"SAP Management Console"
title:"Scalar API Reference"
title:"SIMATIC 300"
title:"smtp4dev"
title:"spark master at"
title:"StrongShop"
title:"Supervisor Status"
title:"Theia IDE"
title:"TileServer-php"
'title:"TL-WR840N"'
title:"TOTOLINK"
'title:"TP-Link Router"'
title:"Traccar"
title:"UniFi OS"
title:"Unisphere"
title:"Usermin"
title:"VeloCloud"
title:"Vite App"
title:"Voyager"
title:"WAGO Ethernet Web-based Management"
title:"Wazuh"
title:"Weaviate"
title:"Weaviate Console"
title:"Welcome to the Apache Tika"
title:"Yii"
title:"zpan"
title:"Р7-Офис"
title:"用友"
"TP print service"
"Treck FTP server"
"TYPSoft FTP Server"
VMware vCenter Server
"vsFTPd"
'vuln:CVE-2023-40000'
"Welcome to Baby FTP Server"
'"Welcome to " "list of available commands" port:4244'
"Welcome to Network Camera FTP Server"
"Welcome to Pablo's FTP Server"
"Welcome to Pure-FTPd"
"Wind River FTP server"
"WordPress"
'wp-content/plugins/wp-simple-firewall/'
"X2 WS_FTP Server"
'x-amz-meta-s3cmd-attrs'
"X-Application-Context"
"X-backend-server"
"X-Backend-Server"
"x-envoy-peer-metadata"
"Xerver Free FTP Server"
"Xlight FTP Server"
"X-Magento-Tags"
"x-middleware-rewrite"
"X-OWA-Version"
'X-Powered-By: AdonisJs'
"X-Powered-By: PHP/"
'X-Served-By: cache'
"yeswiki"
"Z-FTP"
http.title:tinypilot
title:"hid - TinyPilot"
title:"tinypilot" -title:"Log In"
### city:
특정 도시에 있는 장치를 찾습니다.
`city:"Bangalore"`
### country:
특정 국가에 있는 장치를 찾습니다.
`country:"IN"`
### geo:
지리적 좌표로 장치를 찾습니다.
`geo:"56.913055,118.250862"`
### Location
`country:us`
`country:ru country:de city:chicago`
### hostname:
호스트 이름과 일치하는 장치를 찾습니다.
`server: "gws" hostname:"google"`
`hostname:example.com -hostname:subdomain.example.com`
`hostname:example.com,example.org`
### net:
IP 주소 또는 /x CIDR를 기반으로 장치를 찾습니다.
`net:210.214.0.0/16`
### Organization
`org:microsoft`
`org:"United States Department"`
### Autonomous System Number (ASN)
`asn:ASxxxx`
### os:
운영 체제를 기반으로 장치를 찾습니다.
`os:"windows 7"`
### port:
열린 포트를 기반으로 장치를 찾습니다.
`proftpd port:21`
### before/after:
지정된 시간 이전 또는 이후의 장치를 찾습니다.
`apache after:22/02/2009 before:14/3/2010`
### SSL/TLS Certificates
자체 서명된 인증서
`ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com`
만료된 인증서
`ssl.cert.expired:true`
`ssl.cert.subject.cn:example.com`
### Device Type
`device:firewall`
`device:router`
`device:wap`
`device:webcam`
`device:media`
`device:"broadband router"`
`device:pbx`
`device:printer`
`device:switch`
`device:storage`
`device:specialized`
`device:phone`
`device:"voip"`
`device:"voip phone"`
`device:"voip adaptor"`
`device:"load balancer"`
`device:"print server"`
`device:terminal`
`device:remote`
`device:telecom`
`device:power`
`device:proxy`
`device:pda`
`device:bridge`
### Operating System
`os:"windows 7"`
`os:"windows server 2012"`
`os:"linux 3.x"`
### Product
`product:apache`
`product:nginx`
`product:android`
`product:chromecast`
### Customer Premises Equipment (CPE)
`cpe:apple`
`cpe:microsoft`
`cpe:nginx`
`cpe:cisco`
### Server
`server: nginx`
`server: apache`
`server: microsoft`
`server: cisco-ios`
### ssh fingerprints
`dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0`
# Web
### Pulse Secure
`http.html:/dana-na`
### PEM Certificates
`http.title:"Index of /" http.html:".pem"`
### Tor / Dark Web sites
`onion-location`
# Databases
### MySQL
`"product:MySQL"`
`mysql port:"3306"`
### MongoDB
`"product:MongoDB"`
`mongodb port:27017`
### Fully open MongoDBs
`"MongoDB Server Information { "metrics":"`
`"Set-Cookie: mongo-express=" "200 OK"`
`"MongoDB Server Information" port:27017 -authentication`
### Kibana dashboards without authentication
`kibana content-legth:217`
### elastic
`port:9200 json`
`port:"9200" all:elastic`
`port:"9200" all:"elastic indices"`
### Memcached
`"product:Memcached"`
### CouchDB
`"product:CouchDB"`
`port:"5984"+Server: "CouchDB/2.1.0"`
### PostgreSQL
`"port:5432 PostgreSQL"`
### Riak
`"port:8087 Riak"`
### Redis
`"product:Redis"`
### Cassandra
`"product:Cassandra"`
# Industrial Control Systems
### Samsung Electronic Billboards
`"Server: Prismview Player"`
### Gas Station Pump Controllers
`"in-tank inventory" port:10001`
### Fuel Pumps connected to internet:
CLI 터미널에 접근하는 데 인증이 필요하지 않습니다.
`"privileged command" GET`
### Automatic License Plate Readers
`P372 "ANPR enabled"`
### Traffic Light Controllers / Red Light Cameras
`mikrotik streetlight`
### Voting Machines in the United States
"voter system serial" country:US
### Open ATM:
ATM 접근 가능성을 허용할 수 있습니다.
`NCR Port:"161"`
### Telcos Running Cisco Lawful Intercept Wiretaps
`"Cisco IOS" "ADVIPSERVICESK9_LI-M"`
### Prison Pay Phones
`"[2J[H Encartele Confidential"`
### Tesla PowerPack Charging Status
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Electric Vehicle Chargers
`"Server: gSOAP/2.8" "Content-Length: 583"`
### Maritime Satellites
Shodan은 실시간으로 선박 위치를 매핑하는 꽤 멋진 Ship Tracker를 만들었습니다!
`"Cobham SATCOM" OR ("Sailor" "VSAT")`
### Submarine Mission Control Dashboards
`title:"Slocum Fleet Mission Control"`
### CAREL PlantVisor Refrigeration Units
`"Server: CarelDataServer" "200 Document follows"`
### Nordex Wind Turbine Farms
`http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"`
### C4 Max Commercial Vehicle GPS Trackers
`"[1m[35mWelcome on console"`
### DICOM Medical X-Ray Machines
기본적으로 보안되어 있지만, 다행히도 이 1,700개 이상의 기계들은 인터넷에 있을 이유가 없습니다.
`"DICOM Server Response" port:104`
### GaugeTech Electricity Meters
`"Server: EIG Embedded Web Server" "200 Document follows"`
### Siemens Industrial Automation
`"Siemens, SIMATIC" port:161`
### Siemens HVAC Controllers
`"Server: Microsoft-WinCE" "Content-Length: 12581"`
### Door / Lock Access Controllers
`"HID VertX" port:4070`
### Railroad Management
`"log off" "select the appropriate"`
### Tesla Powerpack charging Status:
Tesla Powerpack의 충전 상태를 찾는 데 도움이 됩니다.
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### XZERES Wind Turbine
`title:"xzeres wind"`
### PIPS Automated License Plate Reader
`"html:"PIPS Technology ALPR Processors""`
### Modbus
`"port:502"`
### Niagara Fox
`"port:1911,4911 product:Niagara"`
### GE-SRTP
`"port:18245,18246 product:"general electric""`
### MELSEC-Q
`"port:5006,5007 product:mitsubishi"`
### CODESYS
`"port:2455 operating system"`
### S7
`"port:102"`
### BACnet
`"port:47808"`
### HART-IP
`"port:5094 hart-ip"`
### Omron FINS
`"port:9600 response code"`
### IEC 60870-5-104
`"port:2404 asdu address"`
### DNP3
`"port:20000 source address"`
### EtherNet/IP
`"port:44818"`
### PCWorx
`"port:1962 PLC"`
### Crimson v3.0
`"port:789 product:"Red Lion Controls"`
### ProConOS
`"port:20547 PLC"`
# Remote Desktop
### Unprotected VNC
`"authentication disabled" port:5900,5901`
`"authentication disabled" "RFB 003.008"`
### Windows RDP
99.99%는 보조 Windows 로그인 화면으로 보호됩니다.
`"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"`
# C2 Infrastructure
### CobaltStrike Servers
`product:"cobalt strike team server"`
`product:"Cobalt Strike Beacon"`
`ssl.cert.serial:146473198` \- 기본 인증서 일련 번호
`ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1`
`ssl:foren.zik`
### Brute Ratel
`http.html_hash:-1957161625`
`product:"Brute Ratel C4"`
### Covenant
`ssl:”Covenant” http.component:”Blazor”`
### Metasploit
`ssl:"MetasploitSelfSignedCA"`
# Network Infrastructure
### Hacked routers:
손상된 라우터
`hacked-router-help-sos`
### Redis open instances
`product:"Redis key-value store"`
### Citrix:
Citrix Gateway를 찾습니다.
`title:"citrix gateway"`
### Weave Scope Dashboards
Kubernetes Pod 및 Docker 컨테이너 내부의 명령줄 액세스, 전체 인프라의 실시간 시각화/모니터링.
`title:"Weave Scope" http.favicon.hash:567176827`
### Jenkins CI
`"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"`
### Jenkins:
Jenkins 제한 없는 대시보드
`x-jenkins 200`
### Docker APIs
`"Docker Containers:" port:2375`
### Docker Private Registries
`"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab`
### Pi-hole Open DNS Servers
`"dnsmasq-pi-hole" "Recursion: enabled"`
### DNS Servers with recursion
`"port: 53" Recursion: Enabled`
### Already Logged-In as root via Telnet
`"root@" port:23 -login -password -name -Session`
### Telnet Access:
Telnet 접근에 비밀번호가 필요하지 않습니다.
`port:23 console gateway`
### Polycom video-conference system no-auth shell
`"polycom command shell"`
### NPort serial-to-eth / MoCA devices without password
`nport -keyin port:23`
### Android Root Bridges
Google의 엉성한 업데이트 방식의 간접적인 결과입니다. 🙄 자세한 내용은 여기를 참조하십시오.
`"Android Debug Bridge" "Device" port:5555`
### Lantronix Serial-to-Ethernet Adapter Leaking Telnet Passwords
`Lantronix password port:30718 -secured`
### Citrix Virtual Apps
`"Citrix Applications:" port:1604`
### Cisco Smart Install
취약함 (특히 노출될 때 "설계상" 취약).
`"smart install client active"`
### PBX IP Phone Gateways
`PBX "gateway console" -password port:23`
### Polycom Video Conferencing
`http.title:"- Polycom" "Server: lighttpd"`
`"Polycom Command Shell" -failed port:23`
### Telnet Configuration:
`"Polycom Command Shell" -failed port:23`
예: Polycom 화상 회의
### Bomgar Help Desk Portal
`"Server: Bomgar" "200 OK"`
### Intel Active Management CVE-2017-5689
`"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995`
`”Active Management Technology”`
### HP iLO 4 CVE-2017-12542
`HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900`
### Lantronix ethernet adapter’s admin interface without password
`"Press Enter for Setup Mode port:9999"`
### Wifi Passwords:
Shodan에서 일반 텍스트 Wi-Fi 비밀번호를 찾는 데 도움이 됩니다.
`html:"def_wirelesspassword"`
### Misconfigured Wordpress Sites:
wp-config.php 파일에 접근하면 데이터베이스 자격 증명이 노출될 수 있습니다.
`http.html:"* The wp-config.php creation script uses this file"`
# Outlook Web Access:
### Exchange 2007
`"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"`
### Exchange 2010
`"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392`
### Exchange 2013 / 2016
`"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"`
### Lync / Skype for Business
`"X-MS-Server-Fqdn"`
# Network Attached Storage (NAS)
### SMB (Samba) File Shares
약 500,000개의 결과를 생성합니다... "Documents" 또는 "Videos" 등을 추가하여 범위를 좁히십시오.
`"Authentication: disabled" port:445`
### Specifically domain controllers:
`"Authentication: disabled" NETLOGON SYSVOL -unix port:445`
### Concerning default network shares of QuickBooks files:
`"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445`
### FTP Servers with Anonymous Login
`"220" "230 Login successful." port:21`
### Iomega / LenovoEMC NAS Drives
`"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"`
### Buffalo TeraStation NAS Drives
`Redirecting sencha port:9000`
### Logitech Media Servers
`"Server: Logitech Media Server" "200 OK"`
예: Logitech Media Servers
### Plex Media Servers
`"X-Plex-Protocol" "200 OK" port:32400`
### Tautulli / PlexPy Dashboards
`"CherryPy/5.1.0" "/home"`
### Home router attached USB
`"IPC$ all storage devices"`
# Webcams
### Generic camera search
`title:camera`
### Webcams with screenshots
`webcam has_screenshot:true`
### D-Link webcams
`"d-Link Internet Camera, 200 OK"`
### Hipcam
`"Hipcam RealServer/V1.0"`
### Yawcams
`"Server: yawcam" "Mime-Type: text/html"`
### webcamXP/webcam7
`("webcam 7" OR "webcamXP") http.component:"mootools" -401`
### Android IP Webcam Server
`"Server: IP Webcam Server" "200 OK"`
### Security DVRs
`html:"DVR_H264 ActiveX"`
### Surveillance Cams:
사용자 이름: admin, 비밀번호: :P
`NETSurveillance uc-httpd`
`Server: uc-httpd 1.0.0`
# Printers & Copiers:
### HP Printers
`"Serial Number:" "Built:" "Server: HP HTTP"`
### Xerox Copiers/Printers
`ssl:"Xerox Generic Root"`
### Epson Printers
`"SERVER: EPSON_Linux UPnP" "200 OK"`
`"Server: EPSON-HTTP" "200 OK"`
### Canon Printers
`"Server: KS_HTTP" "200 OK"`
`"Server: CANON HTTP Server"`
# Home Devices
### Yamaha Stereos
`"Server: AV_Receiver" "HTTP/1.1 406"`
### Apple AirPlay Receivers
Apple TV, HomePod 등.
`"\x08_airplay" port:5353`
### Chromecasts / Smart TVs
`"Chromecast:" port:8008`
### Crestron Smart Home Controllers
`"Model: PYNG-HUB"`
# Random Stuff
### Calibre libraries
`"Server: calibre" http.status:200 http.title:calibre`
### OctoPrint 3D Printer Controllers
`title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944`
### Etherium Miners
`"ETH - Total speed"`
### Apache Directory Listings
.pem을 다른 확장자나 phpinfo.php와 같은 파일 이름으로 대체하십시오.
`http.title:"Index of /" http.html:".pem"`
### Misconfigured WordPress
데이터베이스 자격 증명이 포함된 wp-config.php 파일이 노출되었습니다.
`http.html:"* The wp-config.php creation script uses this file"`
### Too Many Minecraft Servers
`"Minecraft Server" "protocol 340" port:25565`
### Literally Everything in North Korea
`net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24`