nullfuzz-pentest/shodan-dorksDorks do Shodan
Este repositório GitHub fornece uma variedade de consultas de pesquisa, conhecidas como "dorks", para o Shodan, uma ferramenta poderosa usada para pesquisar dispositivos conectados à Internet. Os dorks são projetados para ajudar pesquisadores de segurança a descobrir potenciais vulnerabilidades e problemas de configuração em vários tipos de dispositivos, como webcams, roteadores e servidores. Este recurso é útil para aqueles interessados em explorar a segurança de redes e realizar varreduras de vulnerabilidades, incluindo tanto iniciantes quanto profissionais experientes em segurança da informação. Ao utilizar este repositório, os usuários podem melhorar a segurança de suas próprias redes e se proteger contra possíveis ataques.
"TIBCO Spotfire Server"
title:"3ware"
title:"Acunetix"
title:"AddOnFinancePortal"
title:"Administration login" html:"poste
"220 Tornado-vxWorks"
3.1.3.150324
3Com 3CDaemon FTP
"ADI Convergence Galaxy"
'AFP'
app:"Keycloak"
"ArGoSoft FTP Server"
"Backdrop CMS"
BetaFTPD
"/bitrix/p3p.xml"
"BlackMoon FTP Server"
"BlackMoon FTP Server - Free Edition"
"Cerberus FTP Server"
"Check Point FireWall-1 Secure FTP"
"/Citrix/StoreWeb"
"Cleo VLProxy"
"Code-Crafters ftp"
"CommuniGate Pro FTP Server"
cpe:"cpe:2.3🅰️apache:http_server"
cpe:"cpe:2.3🅰️microsoft:sharepoint_server"
cpe:"cpe:2.3🅰️roundcube:webmail"
cpe:"cpe:2.3🅰️xiongmaitech:uc-httpd"
'cpe:"cpe:2.3⭕fortinet:fortios"'
cpe:"cpe:2.3⭕microsoft:windows_10_1903"
cpe:"cpe:2.3⭕microsoft:windows_server_2012"
"Device Identification: Schneider Electric"
"devtools.nestjs.com"
discovery: [suggested query]
"DiskStation FTP server ready"
'django'
dork for asset discovery
"DPTMMSG"
"Dumb FTP Server (dftpd)"
"EasyCoder FTP Server"
"Erlang OTP"
"EZNET_"
"Four-Faith"
"Freebox FTP Server"
"FTP ( BlackJumboDog"
"FTPD1 IBM FTP CS"
"FTP server (BSDI"
"FTP server (FirstClass"
"FTP server (Medusa Async"
"FTP server (NetBSD-ftpd"
"FTP Server (Oracle XML DB"
"FTP server (SunOS 5.6)"
"FTP server (SunOS 5.8)"
"FTP Server (ZyWALL"
"Ftp service of Jana-Server ready"
"Gene6 FTP Server"
"GlobalSCAPE Secure FTP Server"
"Global Site Selector FTP"
"Golden FTP Server Pro"
"Hewlett-Packard"
html:"a-blog cms"
html:"access MongoDB"
html:"acme-challenge"
html:"adrum"
html:"ADSB"
html:"airmedia"
html:"/airwatch/default.aspx"
html:"Akamai CloudTest"
html:"/apriso/"
html:"apriso"
html:"assetlinks.json"
html:"_astro"
html:"Avaya Aura® Utility Services"
html:"AWSEBDockerrunVersion"
html:"Backdrop CMS"
html:"Batflat"
html:"BeeStation"
html:"BentoML"
html:"/bitrix/"
html:"bootstrap-multiselect"
html:"browserconfig.xml"
html:"Casdoor"
html:"/ccmadmin/"
'html:"cdnjs.cloudflare.com/ajax/libs/bulma" || html:"unpkg.com/bulma" || html:"bulma.css" country:"DE"'
html:"cdn.mxpnl.com"
html:"/cgi-bin/cgiServer.exx"
html:"ChanCMS"
html:"Chatbot Arena"
html:"cloudflare/speedtest"
html:"CMSimple"
html:'content="Mattermost"'
html:'content="SLiMS'
html:'content="SLIMS'
html:"Couchbase"
html:""couchdb":"
html:"/+CSCOE+/logon.html"
html:"/css/osasiasp.css"
html:"Cyber Stealer - Secure Access"
html:"DD_RUM.init"
html:"Dependency-Track"
html:"D-Link Central WiFiManager"
html:"Docker Registry Browser"
html:"Doc/WebLogin.asp"
html:"draw.io"
html:"ENVIROMUX"
html:"eSlideManager - Login"
html:"eslintignore"
html:"ETIC Telecom"
'html:"ETQ Reliance"'
html:"ETQ Reliance"
html:"evertz.min.css"
html:"EyesOfNetwork"
html:"ForgeRock Identity Platform"
html:"/fort/login"
html:"foundation.min.css"
html:"foxcms-logo"
html:"_fs_org"
html:"Glimpse.axd"
html:"globalThis.BESZEL"
html:"GnuBoard5"
html:"grafana"
html:"graph_view.php" html:"cacti"
html:"gunicorn.conf.py"
html:"haproxy.cfg"
html:"hp/device/SignIn/Index"
html:"HPE" html:"OneView"
html:"HPE OfficeConnect"
html:"httpbingo.org"
html:"hyperdx"
html:"iboss-font.css"
html:"icinga" html:"Statistics"
html:"ICTBroadcast"
html:"InterMapper"
html:"invision community"
html:"iTop login"
html:"Jakefile"
html:"Journyx"
html:"K1000 Logo"
html:"kaswara"
html:"keybase.txt"
html:"LANDesk"
html:"Langflow"
html:"LDClient.initialize"
html:"liferayPortalCSS"
html:"Lighthouse Studio"
html:"lightstreamer"
html:"lighttpd.conf"
html:"Listmonk"
html:"/llms.txt"
html:"log4j.properties"
html:"Log in to dex"
html:"Login to Frappe"
html:"/logo_login.shtm"
html:"MagnusBilling"
'html:"MapProxy"'
html:"materialize.min.css"
html:"mcp.json"
html:"memtracker"
html:"meteor_runtime_config"
html:"MFC-L9570CDW"
html:"MiCollab End User Portal"
html:"Mitel" html:"MiCollab"
html:"MOLGENIS"
html:"/mstore-api/"
html:"next.config.js"
html:"Nexus Repository"
html:"NPLUG"
html:"ntfy.sh"
html:"nuxt.config.ts"
html:"OA_HTML"
html:"Odoo"
html:"OpenMRS"
html:"OpenPLC"
html:"Openspeedtest"
html:"/?op=registration" "OpenSSL"
html:"Optergy"
html:"osTicket"
html:"PEPLINK"
html:"Perforce"
html:"phpmyadmin"
html:"/plugins/duracelltomi-google-tag-manager/"
html:"/plugins/google-captcha"
html:"/plugins/megamenu"
html:"/plugins/newsletter/"
html:"/plugins/sg-cachepress/"
html:"/plugins/tutor/"
html:"/plugins/woocommerce-admin"
html:"/plugins/worker/"
html:"plugins/wpdirectorykit/"
html:"/plugins/wp-pagenavi/"
html:"pomerium"
html:"Portkey AI"
html:"posstaticfooter"
html:"PostgREST"
html:"posthog.init"
html:"postmaster_start_time"
html:"Powered by vtiger CRM"
html:"Proxmox = {"
html:"qdrant - vector search engine"
html:"redirect.pizza"
html:"redoc.standalone.js"
html:"RIoT Controller"
html:"Rocket LMS"
html:"Roxy-WI"
html:"RuoYi"
html:"ruxitagentjs"
html:"SAP NetWeaver Application Server Java"
html:"scoold-wrapper"
html:"sekolahku.web"
html:"semantic.min.css"
html:"Sentry.init"
html:"server-islands"
html:"SERVER_SIDE_FIDES_API_URL"
html:"setupconfig.xml"
html:"setup.py"
html:"Shibboleth"
html:"siam-convite"
html:"SickChill"
html:"simple-mobile-url-redirect"
html:"Site Not Found | Framer"
html:"SLIMS"
html:"SmarterMail"
html:"smtp_password"
html:"SonicWall" html:"SMA"
html:"/themes/astra/"
html:"TIBCO Managed"
html:"Tiny Tiny RSS"
html:"TiTiler"
html:"Mage"
html:"ProTop"
html:"<title>SuperTokens "
html:"tolgee"
html:"TOPdesk"
html:"TOTOLINK"
'html:"TRUfusion Enterprise"'
html:"/ucmuser/"
html:"UniFi Dream Machine SE"
html:"URVE Web Manager"
html:"var Liferay"
html:"veraCoreScreenHeight"
html:"vercel.json"
html:"voyager.min.js"
html:".vscode" html:"Directory listing for /"
html:"Vugex Framework"
html:"WAGO Ethernet Web-based Management"
html:"Watchguard" html:"Authentication Server"
html:"/web/cgi-bin/usbinfo.cgi"
html:"webui-centerpanel"
html:"Wekan"
html:"window.apos"
html:"wire:id"
html:"wp-content/plugins/cmp-coming-soon-maintenance"
html:"wp-content/plugins/download-manager/"
html:"/wp-content/plugins/gravityforms"
html:"wp-content/plugins/header-footer-elementor/"
html:"/wp-content/plugins/sitepress-multilingual-cms"
html:"wp-content/plugins/system-dashboard/"
html:"/wp-content/plugins/the-events-calendar/"
html:"wp-event-solution"
html:"WRN150"
html:"www.teccom-eu.net/wsdl"
html:"xstoremgwt"
html:"yeswiki"
html:"Yeti"
html:"ZimaOS"
html:"Zimbra Collaboration Suite Web Client"
html:"Zipline"
'http.component:"Apache Struts"'
http.component:"aurelia"
http.component:"cherrypy"
http.component:"Craft CMS"
http.component:"Discourse"
http.component:"django"
http.component:"Flask"
http.component:"joomla"
http.component:"lighttpd"
http.component:"Microsoft SharePoint"
http.component:"mochiweb" country:"US"
http.component:"Next.js"
http.component:"october cms"
http.component:"OpenCart"
http.component:"osCommerce"
http.component:"php"
http.component:"Plone"
http.component:"profilepress"
http.component:"roundcube"
http.component:"ServiceNow"
http.component:"sharepoint"
http.component:"Sharepoint"
http.component:"Shopify"
http.component:"SilverStripe"
http.component:"Squarespace"
http.component:"symfony"
http.component:"typo3"
http.component:"winstone servlet container"
http.component:"wordpress"
http.component:"WordPress"
http.component:"wordpress" http.html:"status-draft"
http.component:"wordpress" && http.html:"/wp-content/plugins/simple-user-registration/"
http.favicon.hash:1015186617
http.favicon.hash:-1033616879
http.favicon.hash:1111283449
http.favicon.hash:1163764264
http.favicon.hash:1185161484
http.favicon.hash:1192389544 port:3580
http.favicon.hash:"-1250474341"
http.favicon.hash:1253194620
http.favicon.hash:129457226
http.favicon.hash:-1338105374
http.favicon.hash:"-1381126564"
http.favicon.hash:-1410437493
http.favicon.hash:1436966696 http.html:"/css/archiver.css"
http.favicon.hash:-1445519482
http.favicon.hash:"1540720428"
http.favicon.hash:-1569311459
http.favicon.hash:"-165268926"
http.favicon.hash:1696974531
http.favicon.hash:-177043778
http.favicon.hash:-1889244460
http.favicon.hash:"1895809524"
http.favicon.hash:-1924700661
http.favicon.hash:-1952619005
http.favicon.hash:203612613
http.favicon.hash:-234487373
http.favicon.hash:-236105569
http.favicon.hash:252728887
http.favicon.hash:-268676052
http.favicon.hash:-282504889
http.favicon.hash:"284403119"
http.favicon.hash:-286484075 http.title:"Open WebUI"
http.favicon.hash:"362091310"
http.favicon.hash:385597939
http.favicon.hash:489905671
http.favicon.hash:-534530225
http.favicon.hash:-542502280
http.favicon.hash:-60395993
http.favicon.hash:-631002664
http.favicon.hash:"733091897"
http.favicon.hash:-741058468 "lighttpd/1.4.32"
http.favicon.hash:-742276344
http.favicon.hash:831854882
http.favicon.hash:-847792508
http.favicon.hash:-915768386
http.favicon.hash:"97378986"
http.headers_hash:1985490094
http.html:"Adfinity"
http.html:"Agent Development Kit Dev UI"
http.html:"Apollo Sandbox"
http.html:"astro"
http.html:"ASUSTOR"
'http.html:"AWStats"'
http.html:"backup-migration"
http.html:"BeyondTrust"
http.html:"bitrix"
http.html:"cdn.raygun.io"
http.html:"cgit"
http.html:"ChanCMS"
http.html:"cockpit"
http.html:"cockpit/static/login.css"
http.html:"Craft CMS"
http.html:"craftercms"
http.html:"CREATE TABLE" http.html:"SELECT"
http.html:"data-xwiki-reference"
http.html:"debug_kit"
http.html:"Docusaurus"
http.html:"EktronClientManager"
http.html:"embedpano"
http.html:"Expert Net Control"
http.html:"flDebugToolbar"
http.html:"Flock Admin"
http.html:"flutter_bootstrap.js"
http.html:"FreshRSS"
http.html:"ganglia_form.submit()"
'http.html_hash:1076109428 ssl.cert.issuer.cn:"IOS-Self-Signed-Certificate" port:8443'
"http.html_hash:-1466805544"
'http.html_hash:-1527157728 "Model: FMG-VM"'
http.html:"imgproxy"
http.html:"ImpressCMS"
http.html:"Index of" http.html:"sessions"
http.html:" itop login"
http.html:"klik_loginsystem"
http.html:"laminas"
http.html:"Line-TCPRS1"
http.html:"login to your cyberpanel account"
http.html:"LogRocket.init"
http.html:"matomo.js"
http.html:"/melis/MelisCms"
http.html:"MPDV"
http.html:"MyBB"
http.html:"N8n"
http.html:".node_repl_history"
http.html:".npmignore"
http.html:"</OAI-PMH"
http.html:"oceanwp" http.html:"woocommerce"
http.html:"Ollama" port:11434
http.html:"opencode"
http.html:"OpenProject"
http.html:"postman.json"
http.html:"Powered by phpcms"
http.html:".prettierignore"
http.html:"q:version"
http.html:"RailsAdmin"
http.html:"report server web portal"
http.html:"Request-Baskets"
http.html:"roadiz"
http.html:SAP Message Server
http.html:"Selenium Grid" "ready"
http.html:"seo-automatic-seo-tools"
http.html:"ServiceStack"
http.html:"SitecoSitecore Experience Platform"
'http.html:"SPIP"'
http.html:"static.hotjar.com"
http.html:"static.openreplay.com"
http.html:".stylelintignore"
http.html:"TOTOLINK"
'http.html:trx_addons'
http.html:"umbraco"
http.html:"UniFi OS"
http.html:"/VAADIN/"
http.html:"vben" || http.html:"vue-vben-admin"
http.html:"VictoriaMetrics"
http.html:"vtiger CRM"
http.html:"wc-multivendor-membership"
http.html:"window.frappe"
'http.html:"/wp-content/plugins/ai-engine/"'
http.html:"/wp-content/plugins/ditty-news-ticker/"
http.html:"wp-content/plugins/event-monster"
http.html:"/wp-content/plugins/fluentform/"
http.html:"/wp-content/plugins/give/"
http.html:"/wp-content/plugins/jeg-elementor-kit"
http.html:"/wp-content/plugins/learning-management-system/"
http.html:"/wp-content/plugins/learnpress"
http.html:"/wp-content/plugins/learnpress/"
http.html:"/wp-content/plugins/litespeed-cache/"
http.html:"wp-content/plugins/media-library-assistant"
http.html:"/wp-content/plugins/nd-booking"
http.html:"/wp-content/plugins/newsletter/"
http.html:"wp-content/plugins/post-timeline/"
http.html:"/wp-content/plugins/protect-wp-admin"
http.html:"/wp-content/plugins/sassy-social-share"
http.html:"/wp-content/plugins/seo-by-rank-math/"
http.html:"/wp-content/plugins/stop-user-enumeration/"
http.html:"/wp-content/plugins/the-events-calendar/"
http.html:"/wp-content/plugins/ultimate-faqs"
"http.html:/wp-content/plugins/ultimate-member/"
http.html:"/wp-content/plugins/woocommerce-abandoned-cart/"
http.html:"/wp-content/plugins/wpappninja"
'http.html:"wp-content/plugins/wp-automatic/"'
http.html:"/wp-content/plugins/wp-recall/"
http.html:"wp-google-maps"
http.html:"ypareo"
http.html:"zen-cart" || http.html:"Zen Cart"
http.html:"ZKTeco Security"
http.html:"zk.wpd" OR http.html:"<!-- ZK "
'http.title:"Adminer"'
http.title:"ADSelfService Plus"
http.title:"AJ-Report"
http.title:"Amatera App"
http.title:"Ambassador Diagnostic Overview"
http.title:"apache druid"
http.title:"Apache kafka"
http.title:"Apache Unomi"
http.title:"argo cd"
'http.title:"Artifactory"'
http.title:"beszel"
http.title:"biotime"
http.title:"bofamet"
'http.title:"Bonita" || "Server: Bonita"'
http.title:"Cascade CMS"
http.title:"Change Detection"
http.title:"ChirpStack LoRaWAN"
http.title:"churchcrm"
http.title:"Cisco Prime License Manager"
http.title:"Cisco Webex Meetings"
http.title:"citrix gateway" || title:"netscaler gateway"
http.title:"Cobbler Web Interface"
http.title:"ComfyUI"
http.title:"Content Server"
http.title:"Cortex XSOAR"
http.title:"Dagster"
http.title:"dbt Docs"
http.title:"DGN2200"
http.title:"Dify"
http.title:"EasyCVR"
'http.title:"eclipse birt home"'
http.title:"Electrolink"
'http.title:"elfinder"'
http.title:"elfinder"
'http.title:"Emerson Network Power IntelliSlot Web Card"'
http.title:"emlog"
'http.title:"ENIGMA NMS"'
http.title:"ESPHome"
http.title:"eureka"
http.title:"Feast Feature Store"
http.title:"File Exchange"
http.title:"FlexNet Login"
http.title:"Flower"
http.title:"Flowise"
http.title:"Flowise - Build AI Agents, Visually"
http.title:"Frigate"
http.title:"geoserver"
'http.title:"HedgeDoc - Ideas grow better together"'
http.title:'Home - Default Site'
http.title:"HOOBS"
http.title:"horizon daas"
http.title:"HP LaserJet"
http.title:"IBM Security Verify Access"
http.title:"IBM Spectrum"
http.title:"Ice Hrm Login"
'http.title:"IceWarp"'
http.title:"Index of" http.html:"CFIDE"
http.title:"Index of" http.html:"glpi"
'http.title:"InvoiceShelf"'
http.title:"ipTIME"
http.title:"irisnext"
http.title:"ITFlow"
http.title:"ivanti connect secure"
http.title:"Kanboard"
http.title:"LG LED Assistant"
'http.title:"LG LED Assistant" OR http.title:"LED Assistant"'
http.title:"LiquidFiles"
http.title:"Login | Zoraxy"
http.title:"Maltrail"
http.title:"manageengine"
http.title:"Meshery"
http.title:"Metabase" http.html:"setup"
'http.title:"Microweber"'
http.title:"minio console"
http.title:"Monsta FTP"
http.title:"Munin"
http.title:"Network Video Recorder Login"
http.title:"nginx ui"
http.title:"ngSurvey enterprise survey software"
http.title:"NocoDB"
http.title:"NocoDB" || http.favicon.hash:"-1123780655"
http.title:"Nordex Control - Wind Farm Portal"
http.title:"opensign"
http.title:"OpenVPN Access Server"
http.title:"OpManager"
http.title:"oracle peoplesoft enterprise"
http.title:"pgAdmin"
http.title:"phpMyAdmin"
'http.title:"phpMyFAQ"'
http.title:"Polycom HDX"
http.title:"pritunl"
http.title:"Prometheus Time Series"
http.title:"qnap"
http.title:"Redmine"
http.title:"reposilite"
http.title:"Sanity Studio"
http.title:"Seafile"
http.title:"SharePoint"
http.title:"Shibboleth IdP"
http.title:"Sign In - Gogs"
http.title:"SmarterMail"
http.title:"Sophos"
http.title:"Spark" http.html:"Environment"
http.title:"Stirling PDF"
http.title:"Symfony"
http.title:"T24 Sign in"
http.title:"temBoard"
http.title:"tenda wifi"
http.title:"ThingsBoard"
http.title:"Traefik"
http.title:"Traggo"
http.title:"Trust Center"
http.title:"Umbraco"
http.title:"Unified Communications Self Care Portal"
http.title:"Uptime Kuma"
http.title:"vlife"
http.title:"vrealize log insight"
'http.title:"VulnApp"'
'http.title:"Weblate"'
http.title:"Welcome to BlueMind"
http.title:"WNR614"
http.title:"woodpecker"
http.title:"WordPress" "graphql"
http.title:"Xymon"
http.title:"Zammad Helpdesk"
http.title:"Zimbra Collaboration Suite"
'http.title:"用友" "NC"'
http.title:"神行者路由"
"Hummingbird Ltd. (HCLFTPD)"
inurl:"/plugins/generic/tinymce/plugins/justboil.me/"
"Ipswitch-IMail"
"Java FTP Proxy Server"
"JD FTP Server Ready"
"LANIER MP 2555 FTP server"
"Mac OS X Server's FTP server"
Maverick_SSHD
"meteobridge"
"MiniUPnPd"
"mynodename"
"NcFTPd Server"
"NET Disk FTP Server ready"
"NETGEAR DGN"
"Network Management Card AOS"
nfs
"NTP"
"ntpsec"
"Nucleus FTP Server"
"OpenDreambox FTP service"
"Oracle Internet File System FTP"
"Oracle-iPlanet-Web-Server"
oracle port:1521
OrangeHRM
"PacketShaper FTP server"
"Personal FTP Server"
"Plesk"
port:1883 broker
port:22 "Debian"
port:"3389"
'port:44818 "Vendor ID: Rockwell Automation/Allen-Bradley"'
'port:4786 "Smart Install"'
port:4899 product:"Famatech Radmin"
port:502 "P34"
port:502 "P58"
port:52311 "BigFixHTTPServer"
port:53
port:5353
"port:7"
'port:8009 product:"Apache Tomcat"'
port:9100
'"Prefect" port:4200'
"PrNET FTP server"
product:"Allegro RomPager"
product:"check_mk"
product:cockroachdb
product:"Consul"
product:"Direct Connect P2P"
product:"Dovecot Pigeonhole sieve"
product:"Emby Media Server"
product:"FileZilla"
product:"FileZilla Server"
product:"Grafana"
product:"IronPort AsyncOS http config"
product:"Java Debug Wire Protocol"
product:"Java Message Service"
product:"Kyocera Printer Panel"
'product:"Microsoft ftpd"'
product:"MongoDB"
product:"NATS Server"
product:openclaw
product:"oracle weblogic"
product:"ProFTPD"
product:"Pure-FTPd"
product:"Pure-FTPd" version:"1.0.14"
product:"Pure-FTPd" version:"1.0.24"
product:"QNAP"
product:"redis"
product:"SAProuter"
product:"SNMP"
product:"SonicWALL Email Security"
product:"Titan FTP"
product:"Titan ftpd"
product:"Titan ftpd" version:"16.00.2672"
product:"Veritas Backup Exec"
product:"vnc"
product:"Vtun Virtual Tunnel"
product:"Weebly"
product:"WinRM"
"PROXY-FTP server"
"pSOSystem FTP server"
"/responsive-coming-soon/"
"RIEDEL Artist FTP Server"
"rlogin"
rocketmq port:"9876"
"sails.sid"
"Sambar FTP Server"
"Secure Gateway FTP server"
"Server: Apache/"
'"Server: Apache/" "centos"'
"Server: Aragorn Mitel"
'Server: Boa/0.94.13'
"Server:Cross Web Server"
'Server: cwpsrv'
"Server: Jetty"
"Server: magicinfo premium server"
'Server: MagicInfo Premium Server'
"Server: Mongoose"
'server:"ms .net remoting"'
"server:nginx"
"Server: nginx/"
"Server: squid/"
"Server: UserGate-UTM/42"
'Server: Virtual Web 0.9'
'Server: webswing.org'
"Server: ZEROF Web Server"
"Serv-U FTP Server"
'"Set-Cookie: APPSESSIONID=" "Path=/admin"'
"Set-Cookie: ips4"
"Set-Cookie: MEDDREAMSESSID"
"Sidewinder ftp proxy"
'SSH-2.0-Erlang'
"SSH-2.0-Serv-U"
ssl.cert.subject.cn:"cloud-object-storage.appdomain.cloud"
ssl:"cn=fortiweb"
'ssl:"Grandstream" "Set-Cookie: TRACKID"'
ssl:"ingress-nginx" port:8443
ssl:"ou=fortiswitch"
"storage.googleapis.com"
"system: port:123"
"text/event-stream"
The Avalaunch FTP system
"Titan FTP Server"
title:"123Solar"
title="ACMAILER4.0"
title:"ActiveMQ Artemis Console"
title:"AcuToWeb"
title:"Ad Hoc Transfer"
title:"Agent Zero"
title:"Airflow"
title:"AMR Printer Management"
title:"Apache StreamPark"
title:"Apache Tika"
title:"Applications Manager Login Screen"
title:"Arc for TM1"
title:"Aruba"
title:"AVAMAR"
title:"Bugzilla"
title:"Canon iR-ADV"
title:"CentreStack"
title:"cheat.sh"
title:"ChurchCRM"
title:"Cisco Finesse" port:8445
title:"Cockpit"
title:"DAEnetIP4"
'title:"Dagu"'
'title:"Datart"'
title:"DELMIA Apriso"
title:"Dkron"
title:"DKRON"
title:"D-Link"
title:dokploy
title:"D-Tale"
title:"EkoAPI Admin"
title:"eXist db"
title:"Expedition"
title:"eZ Server Monitor"
title:"F660"
title:"FileCatalyst"
title:"FlexPaper"
title:"FLIR"
title:"Flowise"
title:FortiRecorder
title:"FortiWeb - "
title:"FortiWLM Login"
title:"FUXA"
title:"Gerrit Code Review"
title:"Gitness"
title:"GLPI"
title:"GoAnywhere"
title:"Group-Office"
title:"HertzBeat"
title:"HiveServer2"
title:"iBarn"
title:"IBM Data Risk Manager"
title:"IBM Security Verify Access"
title:"idcCMS"
title:"imageRUNNER"
title:"index" html:".vscode"
title:"Intelbras"
title:"Jfrog"
title:"JHipster"
'title:"Joplin Server"'
title:"KACE Systems Management"
title:"Kong Manager"
title:"LabKey"
title:"Langflow"
title="Laser Printer"
title:"Leantime"
title:"MagicINFO"
title:"MailEnable"
title:"Mailpit"
title:"Memos"
title:"mindsdb"
title:"Miniweb Start Page"
title:"Mongoose"
title:"NAKIVO"
title:"netis router"
title:"NetScaler Console"
title:"NetScaler Gateway"
title:"NextChat"
title:"NextcloudPi"
title:"NextcloudPi Panel"
title:"Nexus Repository Manager"
title:"NUUO"
'title:"OFBiz"'
title:"OpenMetadata"
title:"OpenSearch"
title:"oracle access management"
'title:"Pacts"'
title:"Phoenix Contact - CHARX"
title:"PhotoPrism"
title:"PicHome"
title:"PowerJob"
title:"Rancher"
title:"Redis Commander"
title:"Remotely"
title:"RevPi"
title:"RustDesk API Admin"
title:"SaaS Composer"
title:"SAP Management Console"
title:"Scalar API Reference"
title:"SIMATIC 300"
title:"smtp4dev"
title:"spark master at"
title:"StrongShop"
title:"Supervisor Status"
title:"Theia IDE"
title:"TileServer-php"
'title:"TL-WR840N"'
title:"TOTOLINK"
'title:"TP-Link Router"'
title:"Traccar"
title:"UniFi OS"
title:"Unisphere"
title:"Usermin"
title:"VeloCloud"
title:"Vite App"
title:"Voyager"
title:"WAGO Ethernet Web-based Management"
title:"Wazuh"
title:"Weaviate"
title:"Weaviate Console"
title:"Welcome to the Apache Tika"
title:"Yii"
title:"zpan"
title:"Р7-Офис"
title:"用友"
"TP print service"
"Treck FTP server"
"TYPSoft FTP Server"
VMware vCenter Server
"vsFTPd"
'vuln:CVE-2023-40000'
"Welcome to Baby FTP Server"
'"Welcome to " "list of available commands" port:4244'
"Welcome to Network Camera FTP Server"
"Welcome to Pablo's FTP Server"
"Welcome to Pure-FTPd"
"Wind River FTP server"
"WordPress"
'wp-content/plugins/wp-simple-firewall/'
"X2 WS_FTP Server"
'x-amz-meta-s3cmd-attrs'
"X-Application-Context"
"X-backend-server"
"X-Backend-Server"
"x-envoy-peer-metadata"
"Xerver Free FTP Server"
"Xlight FTP Server"
"X-Magento-Tags"
"x-middleware-rewrite"
"X-OWA-Version"
'X-Powered-By: AdonisJs'
"X-Powered-By: PHP/"
'X-Served-By: cache'
"yeswiki"
"Z-FTP"
http.title:tinypilot
title:"hid - TinyPilot"
title:"tinypilot" -title:"Log In"
### city:
Encontre dispositivos numa cidade específica.
`city:"Bangalore"`
### country:
Encontre dispositivos num país específico.
`country:"IN"`
### geo:
Encontre dispositivos fornecendo coordenadas geográficas.
`geo:"56.913055,118.250862"`
### Localização
`country:us`
`country:ru country:de city:chicago`
### hostname:
Encontre dispositivos que correspondem ao nome de anfitrião.
`server: "gws" hostname:"google"`
`hostname:example.com -hostname:subdomain.example.com`
`hostname:example.com,example.org`
### net:
Encontre dispositivos baseados num endereço IP ou /x CIDR.
`net:210.214.0.0/16`
### Organização
`org:microsoft`
`org:"United States Department"`
### Número de Sistema Autónomo (ASN)
`asn:ASxxxx`
### os:
Encontre dispositivos baseados no sistema operativo.
`os:"windows 7"`
### port:
Encontre dispositivos baseados em portas abertas.
`proftpd port:21`
### before/after:
Encontre dispositivos antes ou depois de um determinado momento.
`apache after:22/02/2009 before:14/3/2010`
### Certificados SSL/TLS
Certificados autoassinados
`ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com`
Certificados expirados
`ssl.cert.expired:true`
`ssl.cert.subject.cn:example.com`
### Tipo de Dispositivo
`device:firewall`
`device:router`
`device:wap`
`device:webcam`
`device:media`
`device:"broadband router"`
`device:pbx`
`device:printer`
`device:switch`
`device:storage`
`device:specialized`
`device:phone`
`device:"voip"`
`device:"voip phone"`
`device:"voip adaptor"`
`device:"load balancer"`
`device:"print server"`
`device:terminal`
`device:remote`
`device:telecom`
`device:power`
`device:proxy`
`device:pda`
`device:bridge`
### Sistema Operativo
`os:"windows 7"`
`os:"windows server 2012"`
`os:"linux 3.x"`
### Produto
`product:apache`
`product:nginx`
`product:android`
`product:chromecast`
### Equipamento do Cliente (CPE)
`cpe:apple`
`cpe:microsoft`
`cpe:nginx`
`cpe:cisco`
### Servidor
`server: nginx`
`server: apache`
`server: microsoft`
`server: cisco-ios`
### Impressões digitais SSH
`dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0`
# Web
### Pulse Secure
`http.html:/dana-na`
### Certificados PEM
`http.title:"Index of /" http.html:".pem"`
### Sites Tor / Dark Web
`onion-location`
# Bases de Dados
### MySQL
`"product:MySQL"`
`mysql port:"3306"`
### MongoDB
`"product:MongoDB"`
`mongodb port:27017`
### MongoDBs totalmente abertos
`"MongoDB Server Information { "metrics":"`
`"Set-Cookie: mongo-express=" "200 OK"`
`"MongoDB Server Information" port:27017 -authentication`
### Painéis Kibana sem autenticação
`kibana content-legth:217`
### elastic
`port:9200 json`
`port:"9200" all:elastic`
`port:"9200" all:"elastic indices"`
### Memcached
`"product:Memcached"`
### CouchDB
`"product:CouchDB"`
`port:"5984"+Server: "CouchDB/2.1.0"`
### PostgreSQL
`"port:5432 PostgreSQL"`
### Riak
`"port:8087 Riak"`
### Redis
`"product:Redis"`
### Cassandra
`"product:Cassandra"`
# Sistemas de Controlo Industrial
### Painéis Publicitários Eletrónicos Samsung
`"Server: Prismview Player"`
### Controladores de Bombas de Gasolina
`"in-tank inventory" port:10001`
### Bombas de Combustível ligadas à internet:
Sem necessidade de autenticação para aceder ao terminal CLI.
`"privileged command" GET`
### Leitores Automáticos de Matrículas
`P372 "ANPR enabled"`
### Controladores de Semáforos / Câmaras de Sinal Vermelho
`mikrotik streetlight`
### Máquinas de Voto nos Estados Unidos
"voter system serial" country:US
### Caixas Multibanco Abertas:
Pode permitir acesso à caixa multibanco.
`NCR Port:"161"`
### Operadoras de Telecom com Interceções Legais Cisco
`"Cisco IOS" "ADVIPSERVICESK9_LI-M"`
### Telefones de Presídios
`"[2J[H Encartele Confidential"`
### Estado de Carregamento Tesla PowerPack
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Carregadores de Veículos Elétricos
`"Server: gSOAP/2.8" "Content-Length: 583"`
### Satélites Marítimos
A Shodan fez um rastreador de navios bastante fixe que mapeia localizações de navios em tempo real, também!
`"Cobham SATCOM" OR ("Sailor" "VSAT")`
### Painéis de Controlo de Missão Submarina
`title:"Slocum Fleet Mission Control"`
### Unidades de Refrigeração CAREL PlantVisor
`"Server: CarelDataServer" "200 Document follows"`
### Parques Eólicos Nordex
`http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"`
### Rastreadores GPS Comerciais C4 Max
`"[1m[35mWelcome on console"`
### Máquinas de Raio-X Médicas DICOM
Protegidas por defeito, felizmente, mas estas mais de 1700 máquinas não deviam estar na internet.
`"DICOM Server Response" port:104`
### Medidores de Eletricidade GaugeTech
`"Server: EIG Embedded Web Server" "200 Document follows"`
### Automação Industrial Siemens
`"Siemens, SIMATIC" port:161`
### Controladores HVAC Siemens
`"Server: Microsoft-WinCE" "Content-Length: 12581"`
### Controladores de Acesso a Portas/Fechaduras
`"HID VertX" port:4070`
### Gestão Ferroviária
`"log off" "select the appropriate"`
### Estado de Carregamento Tesla Powerpack:
Ajuda a encontrar o estado de carregamento do Tesla Powerpack.
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Turbina Eólica XZERES
`title:"xzeres wind"`
### Leitor Automático de Matrículas PIPS
`"html:"PIPS Technology ALPR Processors""`
### Modbus
`"port:502"`
### Niagara Fox
`"port:1911,4911 product:Niagara"`
### GE-SRTP
`"port:18245,18246 product:"general electric""`
### MELSEC-Q
`"port:5006,5007 product:mitsubishi"`
### CODESYS
`"port:2455 operating system"`
### S7
`"port:102"`
### BACnet
`"port:47808"`
### HART-IP
`"port:5094 hart-ip"`
### Omron FINS
`"port:9600 response code"`
### IEC 60870-5-104
`"port:2404 asdu address"`
### DNP3
`"port:20000 source address"`
### EtherNet/IP
`"port:44818"`
### PCWorx
`"port:1962 PLC"`
### Crimson v3.0
`"port:789 product:"Red Lion Controls"`
### ProConOS
`"port:20547 PLC"`
# Ambiente de Trabalho Remoto
### VNC Desprotegido
`"authentication disabled" port:5900,5901`
`"authentication disabled" "RFB 003.008"`
### Windows RDP
99.99% estão protegidos por um ecrã de login secundário do Windows.
`"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"`
# Infraestrutura C2
### Servidores CobaltStrike
`product:"cobalt strike team server"`
`product:"Cobalt Strike Beacon"`
`ssl.cert.serial:146473198` \- número de série do certificado predefinido
`ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1`
`ssl:foren.zik`
### Brute Ratel
`http.html_hash:-1957161625`
`product:"Brute Ratel C4"`
### Covenant
`ssl:”Covenant” http.component:”Blazor”`
### Metasploit
`ssl:"MetasploitSelfSignedCA"`
# Infraestrutura de Rede
### Routers pirateados:
Routers que foram comprometidos
`hacked-router-help-sos`
### Instâncias Redis abertas
`product:"Redis key-value store"`
### Citrix:
Encontre Citrix Gateway.
`title:"citrix gateway"`
### Painéis Weave Scope
Acesso à linha de comandos dentro de pods Kubernetes e contentores Docker, e visualização/monitorização em tempo real de toda a infraestrutura.
`title:"Weave Scope" http.favicon.hash:567176827`
### Jenkins CI
`"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"`
### Jenkins:
Painel Jenkins irrestrito
`x-jenkins 200`
### APIs Docker
`"Docker Containers:" port:2375`
### Registos Privados Docker
`"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab`
### Servidores DNS Abertos Pi-hole
`"dnsmasq-pi-hole" "Recursion: enabled"`
### Servidores DNS com recursão
`"port: 53" Recursion: Enabled`
### Já Autenticado como root via Telnet
`"root@" port:23 -login -password -name -Session`
### Acesso Telnet:
Nenhuma palavra-passe necessária para acesso telnet.
`port:23 console gateway`
### Shell sem autenticação em sistemas de videoconferência Polycom
`"polycom command shell"`
### Dispositivos NPort serial-eth / MoCA sem palavra-passe
`nport -keyin port:23`
### Pontes Android Root
Um resultado tangencial da abordagem desleixada e fragmentada de atualizações da Google. 🙄 Mais informação aqui.
`"Android Debug Bridge" "Device" port:5555`
### Adaptador Serial-Ethernet Lantronix a filtrar palavras-passe Telnet
`Lantronix password port:30718 -secured`
### Aplicações Virtuais Citrix
`"Citrix Applications:" port:1604`
### Cisco Smart Install
Vulnerável (meio que "por design", mas especialmente quando exposto).
`"smart install client active"`
### Gateways IP PBX
`PBX "gateway console" -password port:23`
### Videoconferência Polycom
`http.title:"- Polycom" "Server: lighttpd"`
`"Polycom Command Shell" -failed port:23`
### Configuração Telnet:
`"Polycom Command Shell" -failed port:23`
Exemplo: Videoconferência Polycom
### Portal de Ajuda Bomgar
`"Server: Bomgar" "200 OK"`
### Intel Active Management CVE-2017-5689
`"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995`
`”Active Management Technology”`
### HP iLO 4 CVE-2017-12542
`HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900`
### Interface de administração do adaptador Ethernet Lantronix sem palavra-passe
`"Press Enter for Setup Mode port:9999"`
### Palavras-passe Wi-Fi:
Ajuda a encontrar palavras-passe Wi-Fi em texto claro no Shodan.
`html:"def_wirelesspassword"`
### Sites WordPress mal configurados:
O ficheiro wp-config.php se acedido pode fornecer as credenciais da base de dados.
`http.html:"* The wp-config.php creation script uses this file"`
# Outlook Web Access:
### Exchange 2007
`"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"`
### Exchange 2010
`"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392`
### Exchange 2013 / 2016
`"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"`
### Lync / Skype for Business
`"X-MS-Server-Fqdn"`
# Armazenamento Conectado à Rede (NAS)
### Partilhas de Ficheiros SMB (Samba)
Produz cerca de 500.000 resultados... restrinja adicionando "Documents" ou "Videos", etc.
`"Authentication: disabled" port:445`
### Controladores de domínio especificamente:
`"Authentication: disabled" NETLOGON SYSVOL -unix port:445`
### Preocupante partilhas de rede predefinidas de ficheiros QuickBooks:
`"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445`
### Servidores FTP com Login Anónimo
`"220" "230 Login successful." port:21`
### Discos NAS Iomega / LenovoEMC
`"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"`
### Discos NAS Buffalo TeraStation
`Redirecting sencha port:9000`
### Servidores Multimédia Logitech
`"Server: Logitech Media Server" "200 OK"`
Exemplo: Servidores Multimédia Logitech
### Servidores Multimédia Plex
`"X-Plex-Protocol" "200 OK" port:32400`
### Painéis Tautulli / PlexPy
`"CherryPy/5.1.0" "/home"`
### USB ligado ao router doméstico
`"IPC$ all storage devices"`
# Webcams
### Pesquisa genérica de câmaras
`title:camera`
### Webcams com capturas de ecrã
`webcam has_screenshot:true`
### Webcams D-Link
`"d-Link Internet Camera, 200 OK"`
### Hipcam
`"Hipcam RealServer/V1.0"`
### Yawcams
`"Server: yawcam" "Mime-Type: text/html"`
### webcamXP/webcam7
`("webcam 7" OR "webcamXP") http.component:"mootools" -401`
### Servidor Android IP Webcam
`"Server: IP Webcam Server" "200 OK"`
### DVRs de Segurança
`html:"DVR_H264 ActiveX"`
### Câmaras de Vigilância:
Com username:admin e password: :P
`NETSurveillance uc-httpd`
`Server: uc-httpd 1.0.0`
# Impressoras e Copiadoras:
### Impressoras HP
`"Serial Number:" "Built:" "Server: HP HTTP"`
### Copiadoras/Impressoras Xerox
`ssl:"Xerox Generic Root"`
### Impressoras Epson
`"SERVER: EPSON_Linux UPnP" "200 OK"`
`"Server: EPSON-HTTP" "200 OK"`
### Impressoras Canon
`"Server: KS_HTTP" "200 OK"`
`"Server: CANON HTTP Server"`
# Dispositivos Domésticos
### Aparelhos de Som Yamaha
`"Server: AV_Receiver" "HTTP/1.1 406"`
### Recetores Apple AirPlay
Apple TVs, HomePods, etc.
`"\x08_airplay" port:5353`
### Chromecasts / Smart TVs
`"Chromecast:" port:8008`
### Controladores Domésticos Inteligentes Crestron
`"Model: PYNG-HUB"`
# Coisas Aleatórias
### Bibliotecas Calibre
`"Server: calibre" http.status:200 http.title:calibre`
### Controladores de Impressoras 3D OctoPrint
`title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944`
### Mineradores de Ethereum
`"ETH - Total speed"`
### Listagens de Diretórios Apache
Substitua .pem por qualquer extensão ou um nome de ficheiro como phpinfo.php.
`http.title:"Index of /" http.html:".pem"`
### WordPress mal configurado
Ficheiros wp-config.php expostos contendo credenciais de base de dados.
`http.html:"* The wp-config.php creation script uses this file"`
### Demasiados Servidores Minecraft
`"Minecraft Server" "protocol 340" port:25565`
### Literalmente Tudo na Coreia do Norte
`net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24`