nullfuzz-pentest/shodan-dorksShodan Dorks
Этот репозиторий GitHub содержит набор поисковых запросов, известных как «дорки» (dorks), для Shodan — мощного инструмента, используемого для поиска устройств, подключенных к Интернету. Дорки предназначены для помощи специалистам по безопасности в обнаружении потенциальных уязвимостей и проблем конфигурации в различных типах устройств, таких как веб-камеры, маршрутизаторы и серверы. Этот ресурс полезен для тех, кто интересуется исследованием сетевой безопасности и проведением сканирования уязвимостей, включая как новичков, так и опытных специалистов по информационной безопасности. Используя этот репозиторий, пользователи могут повысить безопасность своих собственных сетей и защититься от потенциальных атак.
"TIBCO Spotfire Server"
title:"3ware"
title:"Acunetix"
title:"AddOnFinancePortal"
title:"Administration login" html:"poste
"220 Tornado-vxWorks"
3.1.3.150324
3Com 3CDaemon FTP
"ADI Convergence Galaxy"
'AFP'
app:"Keycloak"
"ArGoSoft FTP Server"
"Backdrop CMS"
BetaFTPD
"/bitrix/p3p.xml"
"BlackMoon FTP Server"
"BlackMoon FTP Server - Free Edition"
"Cerberus FTP Server"
"Check Point FireWall-1 Secure FTP"
"/Citrix/StoreWeb"
"Cleo VLProxy"
"Code-Crafters ftp"
"CommuniGate Pro FTP Server"
cpe:"cpe:2.3🅰️apache:http_server"
cpe:"cpe:2.3🅰️microsoft:sharepoint_server"
cpe:"cpe:2.3🅰️roundcube:webmail"
cpe:"cpe:2.3🅰️xiongmaitech:uc-httpd"
'cpe:"cpe:2.3⭕fortinet:fortios"'
cpe:"cpe:2.3⭕microsoft:windows_10_1903"
cpe:"cpe:2.3⭕microsoft:windows_server_2012"
"Device Identification: Schneider Electric"
"devtools.nestjs.com"
discovery: [suggested query]
"DiskStation FTP server ready"
'django'
dork for asset discovery
"DPTMMSG"
"Dumb FTP Server (dftpd)"
"EasyCoder FTP Server"
"Erlang OTP"
"EZNET_"
"Four-Faith"
"Freebox FTP Server"
"FTP ( BlackJumboDog"
"FTPD1 IBM FTP CS"
"FTP server (BSDI"
"FTP server (FirstClass"
"FTP server (Medusa Async"
"FTP server (NetBSD-ftpd"
"FTP Server (Oracle XML DB"
"FTP server (SunOS 5.6)"
"FTP server (SunOS 5.8)"
"FTP Server (ZyWALL"
"Ftp service of Jana-Server ready"
"Gene6 FTP Server"
"GlobalSCAPE Secure FTP Server"
"Global Site Selector FTP"
"Golden FTP Server Pro"
"Hewlett-Packard"
html:"a-blog cms"
html:"access MongoDB"
html:"acme-challenge"
html:"adrum"
html:"ADSB"
html:"airmedia"
html:"/airwatch/default.aspx"
html:"Akamai CloudTest"
html:"/apriso/"
html:"apriso"
html:"assetlinks.json"
html:"_astro"
html:"Avaya Aura® Utility Services"
html:"AWSEBDockerrunVersion"
html:"Backdrop CMS"
html:"Batflat"
html:"BeeStation"
html:"BentoML"
html:"/bitrix/"
html:"bootstrap-multiselect"
html:"browserconfig.xml"
html:"Casdoor"
html:"/ccmadmin/"
'html:"cdnjs.cloudflare.com/ajax/libs/bulma" || html:"unpkg.com/bulma" || html:"bulma.css" country:"DE"'
html:"cdn.mxpnl.com"
html:"/cgi-bin/cgiServer.exx"
html:"ChanCMS"
html:"Chatbot Arena"
html:"cloudflare/speedtest"
html:"CMSimple"
html:'content="Mattermost"'
html:'content="SLiMS'
html:'content="SLIMS'
html:"Couchbase"
html:""couchdb":"
html:"/+CSCOE+/logon.html"
html:"/css/osasiasp.css"
html:"Cyber Stealer - Secure Access"
html:"DD_RUM.init"
html:"Dependency-Track"
html:"D-Link Central WiFiManager"
html:"Docker Registry Browser"
html:"Doc/WebLogin.asp"
html:"draw.io"
html:"ENVIROMUX"
html:"eSlideManager - Login"
html:"eslintignore"
html:"ETIC Telecom"
'html:"ETQ Reliance"'
html:"ETQ Reliance"
html:"evertz.min.css"
html:"EyesOfNetwork"
html:"ForgeRock Identity Platform"
html:"/fort/login"
html:"foundation.min.css"
html:"foxcms-logo"
html:"_fs_org"
html:"Glimpse.axd"
html:"globalThis.BESZEL"
html:"GnuBoard5"
html:"grafana"
html:"graph_view.php" html:"cacti"
html:"gunicorn.conf.py"
html:"haproxy.cfg"
html:"hp/device/SignIn/Index"
html:"HPE" html:"OneView"
html:"HPE OfficeConnect"
html:"httpbingo.org"
html:"hyperdx"
html:"iboss-font.css"
html:"icinga" html:"Statistics"
html:"ICTBroadcast"
html:"InterMapper"
html:"invision community"
html:"iTop login"
html:"Jakefile"
html:"Journyx"
html:"K1000 Logo"
html:"kaswara"
html:"keybase.txt"
html:"LANDesk"
html:"Langflow"
html:"LDClient.initialize"
html:"liferayPortalCSS"
html:"Lighthouse Studio"
html:"lightstreamer"
html:"lighttpd.conf"
html:"Listmonk"
html:"/llms.txt"
html:"log4j.properties"
html:"Log in to dex"
html:"Login to Frappe"
html:"/logo_login.shtm"
html:"MagnusBilling"
'html:"MapProxy"'
html:"materialize.min.css"
html:"mcp.json"
html:"memtracker"
html:"meteor_runtime_config"
html:"MFC-L9570CDW"
html:"MiCollab End User Portal"
html:"Mitel" html:"MiCollab"
html:"MOLGENIS"
html:"/mstore-api/"
html:"next.config.js"
html:"Nexus Repository"
html:"NPLUG"
html:"ntfy.sh"
html:"nuxt.config.ts"
html:"OA_HTML"
html:"Odoo"
html:"OpenMRS"
html:"OpenPLC"
html:"Openspeedtest"
html:"/?op=registration" "OpenSSL"
html:"Optergy"
html:"osTicket"
html:"PEPLINK"
html:"Perforce"
html:"phpmyadmin"
html:"/plugins/duracelltomi-google-tag-manager/"
html:"/plugins/google-captcha"
html:"/plugins/megamenu"
html:"/plugins/newsletter/"
html:"/plugins/sg-cachepress/"
html:"/plugins/tutor/"
html:"/plugins/woocommerce-admin"
html:"/plugins/worker/"
html:"plugins/wpdirectorykit/"
html:"/plugins/wp-pagenavi/"
html:"pomerium"
html:"Portkey AI"
html:"posstaticfooter"
html:"PostgREST"
html:"posthog.init"
html:"postmaster_start_time"
html:"Powered by vtiger CRM"
html:"Proxmox = {"
html:"qdrant - vector search engine"
html:"redirect.pizza"
html:"redoc.standalone.js"
html:"RIoT Controller"
html:"Rocket LMS"
html:"Roxy-WI"
html:"RuoYi"
html:"ruxitagentjs"
html:"SAP NetWeaver Application Server Java"
html:"scoold-wrapper"
html:"sekolahku.web"
html:"semantic.min.css"
html:"Sentry.init"
html:"server-islands"
html:"SERVER_SIDE_FIDES_API_URL"
html:"setupconfig.xml"
html:"setup.py"
html:"Shibboleth"
html:"siam-convite"
html:"SickChill"
html:"simple-mobile-url-redirect"
html:"Site Not Found | Framer"
html:"SLIMS"
html:"SmarterMail"
html:"smtp_password"
html:"SonicWall" html:"SMA"
html:"/themes/astra/"
html:"TIBCO Managed"
html:"Tiny Tiny RSS"
html:"TiTiler"
html:"Mage"
html:"ProTop"
html:"<title>SuperTokens "
html:"tolgee"
html:"TOPdesk"
html:"TOTOLINK"
'html:"TRUfusion Enterprise"'
html:"/ucmuser/"
html:"UniFi Dream Machine SE"
html:"URVE Web Manager"
html:"var Liferay"
html:"veraCoreScreenHeight"
html:"vercel.json"
html:"voyager.min.js"
html:".vscode" html:"Directory listing for /"
html:"Vugex Framework"
html:"WAGO Ethernet Web-based Management"
html:"Watchguard" html:"Authentication Server"
html:"/web/cgi-bin/usbinfo.cgi"
html:"webui-centerpanel"
html:"Wekan"
html:"window.apos"
html:"wire:id"
html:"wp-content/plugins/cmp-coming-soon-maintenance"
html:"wp-content/plugins/download-manager/"
html:"/wp-content/plugins/gravityforms"
html:"wp-content/plugins/header-footer-elementor/"
html:"/wp-content/plugins/sitepress-multilingual-cms"
html:"wp-content/plugins/system-dashboard/"
html:"/wp-content/plugins/the-events-calendar/"
html:"wp-event-solution"
html:"WRN150"
html:"www.teccom-eu.net/wsdl"
html:"xstoremgwt"
html:"yeswiki"
html:"Yeti"
html:"ZimaOS"
html:"Zimbra Collaboration Suite Web Client"
html:"Zipline"
'http.component:"Apache Struts"'
http.component:"aurelia"
http.component:"cherrypy"
http.component:"Craft CMS"
http.component:"Discourse"
http.component:"django"
http.component:"Flask"
http.component:"joomla"
http.component:"lighttpd"
http.component:"Microsoft SharePoint"
http.component:"mochiweb" country:"US"
http.component:"Next.js"
http.component:"october cms"
http.component:"OpenCart"
http.component:"osCommerce"
http.component:"php"
http.component:"Plone"
http.component:"profilepress"
http.component:"roundcube"
http.component:"ServiceNow"
http.component:"sharepoint"
http.component:"Sharepoint"
http.component:"Shopify"
http.component:"SilverStripe"
http.component:"Squarespace"
http.component:"symfony"
http.component:"typo3"
http.component:"winstone servlet container"
http.component:"wordpress"
http.component:"WordPress"
http.component:"wordpress" http.html:"status-draft"
http.component:"wordpress" && http.html:"/wp-content/plugins/simple-user-registration/"
http.favicon.hash:1015186617
http.favicon.hash:-1033616879
http.favicon.hash:1111283449
http.favicon.hash:1163764264
http.favicon.hash:1185161484
http.favicon.hash:1192389544 port:3580
http.favicon.hash:"-1250474341"
http.favicon.hash:1253194620
http.favicon.hash:129457226
http.favicon.hash:-1338105374
http.favicon.hash:"-1381126564"
http.favicon.hash:-1410437493
http.favicon.hash:1436966696 http.html:"/css/archiver.css"
http.favicon.hash:-1445519482
http.favicon.hash:"1540720428"
http.favicon.hash:-1569311459
http.favicon.hash:"-165268926"
http.favicon.hash:1696974531
http.favicon.hash:-177043778
http.favicon.hash:-1889244460
http.favicon.hash:"1895809524"
http.favicon.hash:-1924700661
http.favicon.hash:-1952619005
http.favicon.hash:203612613
http.favicon.hash:-234487373
http.favicon.hash:-236105569
http.favicon.hash:252728887
http.favicon.hash:-268676052
http.favicon.hash:-282504889
http.favicon.hash:"284403119"
http.favicon.hash:-286484075 http.title:"Open WebUI"
http.favicon.hash:"362091310"
http.favicon.hash:385597939
http.favicon.hash:489905671
http.favicon.hash:-534530225
http.favicon.hash:-542502280
http.favicon.hash:-60395993
http.favicon.hash:-631002664
http.favicon.hash:"733091897"
http.favicon.hash:-741058468 "lighttpd/1.4.32"
http.favicon.hash:-742276344
http.favicon.hash:831854882
http.favicon.hash:-847792508
http.favicon.hash:-915768386
http.favicon.hash:"97378986"
http.headers_hash:1985490094
http.html:"Adfinity"
http.html:"Agent Development Kit Dev UI"
http.html:"Apollo Sandbox"
http.html:"astro"
http.html:"ASUSTOR"
'http.html:"AWStats"'
http.html:"backup-migration"
http.html:"BeyondTrust"
http.html:"bitrix"
http.html:"cdn.raygun.io"
http.html:"cgit"
http.html:"ChanCMS"
http.html:"cockpit"
http.html:"cockpit/static/login.css"
http.html:"Craft CMS"
http.html:"craftercms"
http.html:"CREATE TABLE" http.html:"SELECT"
http.html:"data-xwiki-reference"
http.html:"debug_kit"
http.html:"Docusaurus"
http.html:"EktronClientManager"
http.html:"embedpano"
http.html:"Expert Net Control"
http.html:"flDebugToolbar"
http.html:"Flock Admin"
http.html:"flutter_bootstrap.js"
http.html:"FreshRSS"
http.html:"ganglia_form.submit()"
'http.html_hash:1076109428 ssl.cert.issuer.cn:"IOS-Self-Signed-Certificate" port:8443'
"http.html_hash:-1466805544"
'http.html_hash:-1527157728 "Model: FMG-VM"'
http.html:"imgproxy"
http.html:"ImpressCMS"
http.html:"Index of" http.html:"sessions"
http.html:" itop login"
http.html:"klik_loginsystem"
http.html:"laminas"
http.html:"Line-TCPRS1"
http.html:"login to your cyberpanel account"
http.html:"LogRocket.init"
http.html:"matomo.js"
http.html:"/melis/MelisCms"
http.html:"MPDV"
http.html:"MyBB"
http.html:"N8n"
http.html:".node_repl_history"
http.html:".npmignore"
http.html:"</OAI-PMH"
http.html:"oceanwp" http.html:"woocommerce"
http.html:"Ollama" port:11434
http.html:"opencode"
http.html:"OpenProject"
http.html:"postman.json"
http.html:"Powered by phpcms"
http.html:".prettierignore"
http.html:"q:version"
http.html:"RailsAdmin"
http.html:"report server web portal"
http.html:"Request-Baskets"
http.html:"roadiz"
http.html:SAP Message Server
http.html:"Selenium Grid" "ready"
http.html:"seo-automatic-seo-tools"
http.html:"ServiceStack"
http.html:"SitecoSitecore Experience Platform"
'http.html:"SPIP"'
http.html:"static.hotjar.com"
http.html:"static.openreplay.com"
http.html:".stylelintignore"
http.html:"TOTOLINK"
'http.html:trx_addons'
http.html:"umbraco"
http.html:"UniFi OS"
http.html:"/VAADIN/"
http.html:"vben" || http.html:"vue-vben-admin"
http.html:"VictoriaMetrics"
http.html:"vtiger CRM"
http.html:"wc-multivendor-membership"
http.html:"window.frappe"
'http.html:"/wp-content/plugins/ai-engine/"'
http.html:"/wp-content/plugins/ditty-news-ticker/"
http.html:"wp-content/plugins/event-monster"
http.html:"/wp-content/plugins/fluentform/"
http.html:"/wp-content/plugins/give/"
http.html:"/wp-content/plugins/jeg-elementor-kit"
http.html:"/wp-content/plugins/learning-management-system/"
http.html:"/wp-content/plugins/learnpress"
http.html:"/wp-content/plugins/learnpress/"
http.html:"/wp-content/plugins/litespeed-cache/"
http.html:"wp-content/plugins/media-library-assistant"
http.html:"/wp-content/plugins/nd-booking"
http.html:"/wp-content/plugins/newsletter/"
http.html:"wp-content/plugins/post-timeline/"
http.html:"/wp-content/plugins/protect-wp-admin"
http.html:"/wp-content/plugins/sassy-social-share"
http.html:"/wp-content/plugins/seo-by-rank-math/"
http.html:"/wp-content/plugins/stop-user-enumeration/"
http.html:"/wp-content/plugins/the-events-calendar/"
http.html:"/wp-content/plugins/ultimate-faqs"
"http.html:/wp-content/plugins/ultimate-member/"
http.html:"/wp-content/plugins/woocommerce-abandoned-cart/"
http.html:"/wp-content/plugins/wpappninja"
'http.html:"wp-content/plugins/wp-automatic/"'
http.html:"/wp-content/plugins/wp-recall/"
http.html:"wp-google-maps"
http.html:"ypareo"
http.html:"zen-cart" || http.html:"Zen Cart"
http.html:"ZKTeco Security"
http.html:"zk.wpd" OR http.html:"<!-- ZK "
'http.title:"Adminer"'
http.title:"ADSelfService Plus"
http.title:"AJ-Report"
http.title:"Amatera App"
http.title:"Ambassador Diagnostic Overview"
http.title:"apache druid"
http.title:"Apache kafka"
http.title:"Apache Unomi"
http.title:"argo cd"
'http.title:"Artifactory"'
http.title:"beszel"
http.title:"biotime"
http.title:"bofamet"
'http.title:"Bonita" || "Server: Bonita"'
http.title:"Cascade CMS"
http.title:"Change Detection"
http.title:"ChirpStack LoRaWAN"
http.title:"churchcrm"
http.title:"Cisco Prime License Manager"
http.title:"Cisco Webex Meetings"
http.title:"citrix gateway" || title:"netscaler gateway"
http.title:"Cobbler Web Interface"
http.title:"ComfyUI"
http.title:"Content Server"
http.title:"Cortex XSOAR"
http.title:"Dagster"
http.title:"dbt Docs"
http.title:"DGN2200"
http.title:"Dify"
http.title:"EasyCVR"
'http.title:"eclipse birt home"'
http.title:"Electrolink"
'http.title:"elfinder"'
http.title:"elfinder"
'http.title:"Emerson Network Power IntelliSlot Web Card"'
http.title:"emlog"
'http.title:"ENIGMA NMS"'
http.title:"ESPHome"
http.title:"eureka"
http.title:"Feast Feature Store"
http.title:"File Exchange"
http.title:"FlexNet Login"
http.title:"Flower"
http.title:"Flowise"
http.title:"Flowise - Build AI Agents, Visually"
http.title:"Frigate"
http.title:"geoserver"
'http.title:"HedgeDoc - Ideas grow better together"'
http.title:'Home - Default Site'
http.title:"HOOBS"
http.title:"horizon daas"
http.title:"HP LaserJet"
http.title:"IBM Security Verify Access"
http.title:"IBM Spectrum"
http.title:"Ice Hrm Login"
'http.title:"IceWarp"'
http.title:"Index of" http.html:"CFIDE"
http.title:"Index of" http.html:"glpi"
'http.title:"InvoiceShelf"'
http.title:"ipTIME"
http.title:"irisnext"
http.title:"ITFlow"
http.title:"ivanti connect secure"
http.title:"Kanboard"
http.title:"LG LED Assistant"
'http.title:"LG LED Assistant" OR http.title:"LED Assistant"'
http.title:"LiquidFiles"
http.title:"Login | Zoraxy"
http.title:"Maltrail"
http.title:"manageengine"
http.title:"Meshery"
http.title:"Metabase" http.html:"setup"
'http.title:"Microweber"'
http.title:"minio console"
http.title:"Monsta FTP"
http.title:"Munin"
http.title:"Network Video Recorder Login"
http.title:"nginx ui"
http.title:"ngSurvey enterprise survey software"
http.title:"NocoDB"
http.title:"NocoDB" || http.favicon.hash:"-1123780655"
http.title:"Nordex Control - Wind Farm Portal"
http.title:"opensign"
http.title:"OpenVPN Access Server"
http.title:"OpManager"
http.title:"oracle peoplesoft enterprise"
http.title:"pgAdmin"
http.title:"phpMyAdmin"
'http.title:"phpMyFAQ"'
http.title:"Polycom HDX"
http.title:"pritunl"
http.title:"Prometheus Time Series"
http.title:"qnap"
http.title:"Redmine"
http.title:"reposilite"
http.title:"Sanity Studio"
http.title:"Seafile"
http.title:"SharePoint"
http.title:"Shibboleth IdP"
http.title:"Sign In - Gogs"
http.title:"SmarterMail"
http.title:"Sophos"
http.title:"Spark" http.html:"Environment"
http.title:"Stirling PDF"
http.title:"Symfony"
http.title:"T24 Sign in"
http.title:"temBoard"
http.title:"tenda wifi"
http.title:"ThingsBoard"
http.title:"Traefik"
http.title:"Traggo"
http.title:"Trust Center"
http.title:"Umbraco"
http.title:"Unified Communications Self Care Portal"
http.title:"Uptime Kuma"
http.title:"vlife"
http.title:"vrealize log insight"
'http.title:"VulnApp"'
'http.title:"Weblate"'
http.title:"Welcome to BlueMind"
http.title:"WNR614"
http.title:"woodpecker"
http.title:"WordPress" "graphql"
http.title:"Xymon"
http.title:"Zammad Helpdesk"
http.title:"Zimbra Collaboration Suite"
'http.title:"用友" "NC"'
http.title:"神行者路由"
"Hummingbird Ltd. (HCLFTPD)"
inurl:"/plugins/generic/tinymce/plugins/justboil.me/"
"Ipswitch-IMail"
"Java FTP Proxy Server"
"JD FTP Server Ready"
"LANIER MP 2555 FTP server"
"Mac OS X Server's FTP server"
Maverick_SSHD
"meteobridge"
"MiniUPnPd"
"mynodename"
"NcFTPd Server"
"NET Disk FTP Server ready"
"NETGEAR DGN"
"Network Management Card AOS"
nfs
"NTP"
"ntpsec"
"Nucleus FTP Server"
"OpenDreambox FTP service"
"Oracle Internet File System FTP"
"Oracle-iPlanet-Web-Server"
oracle port:1521
OrangeHRM
"PacketShaper FTP server"
"Personal FTP Server"
"Plesk"
port:1883 broker
port:22 "Debian"
port:"3389"
'port:44818 "Vendor ID: Rockwell Automation/Allen-Bradley"'
'port:4786 "Smart Install"'
port:4899 product:"Famatech Radmin"
port:502 "P34"
port:502 "P58"
port:52311 "BigFixHTTPServer"
port:53
port:5353
"port:7"
'port:8009 product:"Apache Tomcat"'
port:9100
'"Prefect" port:4200'
"PrNET FTP server"
product:"Allegro RomPager"
product:"check_mk"
product:cockroachdb
product:"Consul"
product:"Direct Connect P2P"
product:"Dovecot Pigeonhole sieve"
product:"Emby Media Server"
product:"FileZilla"
product:"FileZilla Server"
product:"Grafana"
product:"IronPort AsyncOS http config"
product:"Java Debug Wire Protocol"
product:"Java Message Service"
product:"Kyocera Printer Panel"
'product:"Microsoft ftpd"'
product:"MongoDB"
product:"NATS Server"
product:openclaw
product:"oracle weblogic"
product:"ProFTPD"
product:"Pure-FTPd"
product:"Pure-FTPd" version:"1.0.14"
product:"Pure-FTPd" version:"1.0.24"
product:"QNAP"
product:"redis"
product:"SAProuter"
product:"SNMP"
product:"SonicWALL Email Security"
product:"Titan FTP"
product:"Titan ftpd"
product:"Titan ftpd" version:"16.00.2672"
product:"Veritas Backup Exec"
product:"vnc"
product:"Vtun Virtual Tunnel"
product:"Weebly"
product:"WinRM"
"PROXY-FTP server"
"pSOSystem FTP server"
"/responsive-coming-soon/"
"RIEDEL Artist FTP Server"
"rlogin"
rocketmq port:"9876"
"sails.sid"
"Sambar FTP Server"
"Secure Gateway FTP server"
"Server: Apache/"
'"Server: Apache/" "centos"'
"Server: Aragorn Mitel"
'Server: Boa/0.94.13'
"Server:Cross Web Server"
'Server: cwpsrv'
"Server: Jetty"
"Server: magicinfo premium server"
'Server: MagicInfo Premium Server'
"Server: Mongoose"
'server:"ms .net remoting"'
"server:nginx"
"Server: nginx/"
"Server: squid/"
"Server: UserGate-UTM/42"
'Server: Virtual Web 0.9'
'Server: webswing.org'
"Server: ZEROF Web Server"
"Serv-U FTP Server"
'"Set-Cookie: APPSESSIONID=" "Path=/admin"'
"Set-Cookie: ips4"
"Set-Cookie: MEDDREAMSESSID"
"Sidewinder ftp proxy"
'SSH-2.0-Erlang'
"SSH-2.0-Serv-U"
ssl.cert.subject.cn:"cloud-object-storage.appdomain.cloud"
ssl:"cn=fortiweb"
'ssl:"Grandstream" "Set-Cookie: TRACKID"'
ssl:"ingress-nginx" port:8443
ssl:"ou=fortiswitch"
"storage.googleapis.com"
"system: port:123"
"text/event-stream"
The Avalaunch FTP system
"Titan FTP Server"
title:"123Solar"
title="ACMAILER4.0"
title:"ActiveMQ Artemis Console"
title:"AcuToWeb"
title:"Ad Hoc Transfer"
title:"Agent Zero"
title:"Airflow"
title:"AMR Printer Management"
title:"Apache StreamPark"
title:"Apache Tika"
title:"Applications Manager Login Screen"
title:"Arc for TM1"
title:"Aruba"
title:"AVAMAR"
title:"Bugzilla"
title:"Canon iR-ADV"
title:"CentreStack"
title:"cheat.sh"
title:"ChurchCRM"
title:"Cisco Finesse" port:8445
title:"Cockpit"
title:"DAEnetIP4"
'title:"Dagu"'
'title:"Datart"'
title:"DELMIA Apriso"
title:"Dkron"
title:"DKRON"
title:"D-Link"
title:dokploy
title:"D-Tale"
title:"EkoAPI Admin"
title:"eXist db"
title:"Expedition"
title:"eZ Server Monitor"
title:"F660"
title:"FileCatalyst"
title:"FlexPaper"
title:"FLIR"
title:"Flowise"
title:FortiRecorder
title:"FortiWeb - "
title:"FortiWLM Login"
title:"FUXA"
title:"Gerrit Code Review"
title:"Gitness"
title:"GLPI"
title:"GoAnywhere"
title:"Group-Office"
title:"HertzBeat"
title:"HiveServer2"
title:"iBarn"
title:"IBM Data Risk Manager"
title:"IBM Security Verify Access"
title:"idcCMS"
title:"imageRUNNER"
title:"index" html:".vscode"
title:"Intelbras"
title:"Jfrog"
title:"JHipster"
'title:"Joplin Server"'
title:"KACE Systems Management"
title:"Kong Manager"
title:"LabKey"
title:"Langflow"
title="Laser Printer"
title:"Leantime"
title:"MagicINFO"
title:"MailEnable"
title:"Mailpit"
title:"Memos"
title:"mindsdb"
title:"Miniweb Start Page"
title:"Mongoose"
title:"NAKIVO"
title:"netis router"
title:"NetScaler Console"
title:"NetScaler Gateway"
title:"NextChat"
title:"NextcloudPi"
title:"NextcloudPi Panel"
title:"Nexus Repository Manager"
title:"NUUO"
'title:"OFBiz"'
title:"OpenMetadata"
title:"OpenSearch"
title:"oracle access management"
'title:"Pacts"'
title:"Phoenix Contact - CHARX"
title:"PhotoPrism"
title:"PicHome"
title:"PowerJob"
title:"Rancher"
title:"Redis Commander"
title:"Remotely"
title:"RevPi"
title:"RustDesk API Admin"
title:"SaaS Composer"
title:"SAP Management Console"
title:"Scalar API Reference"
title:"SIMATIC 300"
title:"smtp4dev"
title:"spark master at"
title:"StrongShop"
title:"Supervisor Status"
title:"Theia IDE"
title:"TileServer-php"
'title:"TL-WR840N"'
title:"TOTOLINK"
'title:"TP-Link Router"'
title:"Traccar"
title:"UniFi OS"
title:"Unisphere"
title:"Usermin"
title:"VeloCloud"
title:"Vite App"
title:"Voyager"
title:"WAGO Ethernet Web-based Management"
title:"Wazuh"
title:"Weaviate"
title:"Weaviate Console"
title:"Welcome to the Apache Tika"
title:"Yii"
title:"zpan"
title:"Р7-Офис"
title:"用友"
"TP print service"
"Treck FTP server"
"TYPSoft FTP Server"
VMware vCenter Server
"vsFTPd"
'vuln:CVE-2023-40000'
"Welcome to Baby FTP Server"
'"Welcome to " "list of available commands" port:4244'
"Welcome to Network Camera FTP Server"
"Welcome to Pablo's FTP Server"
"Welcome to Pure-FTPd"
"Wind River FTP server"
"WordPress"
'wp-content/plugins/wp-simple-firewall/'
"X2 WS_FTP Server"
'x-amz-meta-s3cmd-attrs'
"X-Application-Context"
"X-backend-server"
"X-Backend-Server"
"x-envoy-peer-metadata"
"Xerver Free FTP Server"
"Xlight FTP Server"
"X-Magento-Tags"
"x-middleware-rewrite"
"X-OWA-Version"
'X-Powered-By: AdonisJs'
"X-Powered-By: PHP/"
'X-Served-By: cache'
"yeswiki"
"Z-FTP"
http.title:tinypilot
title:"hid - TinyPilot"
title:"tinypilot" -title:"Log In"
### city:
Найти устройства в конкретном городе.
`city:"Bangalore"`
### country:
Найти устройства в конкретной стране.
`country:"IN"`
### geo:
Найти устройства по географическим координатам.
`geo:"56.913055,118.250862"`
### Location
`country:us`
`country:ru country:de city:chicago`
### hostname:
Найти устройства, соответствующие имени хоста.
`server: "gws" hostname:"google"`
`hostname:example.com -hostname:subdomain.example.com`
`hostname:example.com,example.org`
### net:
Найти устройства на основе IP-адреса или CIDR /x.
`net:210.214.0.0/16`
### Organization
`org:microsoft`
`org:"United States Department"`
### Autonomous System Number (ASN)
`asn:ASxxxx`
### os:
Найти устройства на основе операционной системы.
`os:"windows 7"`
### port:
Найти устройства на основе открытых портов.
`proftpd port:21`
### before/after:
Найти устройства до или после определённого времени.
`apache after:22/02/2009 before:14/3/2010`
### SSL/TLS Сертификаты
Самоподписанные сертификаты
`ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com`
Просроченные сертификаты
`ssl.cert.expired:true`
`ssl.cert.subject.cn:example.com`
### Тип устройства
`device:firewall`
`device:router`
`device:wap`
`device:webcam`
`device:media`
`device:"broadband router"`
`device:pbx`
`device:printer`
`device:switch`
`device:storage`
`device:specialized`
`device:phone`
`device:"voip"`
`device:"voip phone"`
`device:"voip adaptor"`
`device:"load balancer"`
`device:"print server"`
`device:terminal`
`device:remote`
`device:telecom`
`device:power`
`device:proxy`
`device:pda`
`device:bridge`
### Операционная система
`os:"windows 7"`
`os:"windows server 2012"`
`os:"linux 3.x"`
### Продукт
`product:apache`
`product:nginx`
`product:android`
`product:chromecast`
### Customer Premises Equipment (CPE)
`cpe:apple`
`cpe:microsoft`
`cpe:nginx`
`cpe:cisco`
### Сервер
`server: nginx`
`server: apache`
`server: microsoft`
`server: cisco-ios`
### Отпечатки SSH
`dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0`
# Web
### Pulse Secure
`http.html:/dana-na`
### PEM-сертификаты
`http.title:"Index of /" http.html:".pem"`
### Сайты Tor / Dark Web
`onion-location`
# Базы данных
### MySQL
`"product:MySQL"`
`mysql port:"3306"`
### MongoDB
`"product:MongoDB"`
`mongodb port:27017`
### Полностью открытые MongoDB
`"MongoDB Server Information { "metrics":"`
`"Set-Cookie: mongo-express=" "200 OK"`
`"MongoDB Server Information" port:27017 -authentication`
### Kibana-панели без аутентификации
`kibana content-legth:217`
### elastic
`port:9200 json`
`port:"9200" all:elastic`
`port:"9200" all:"elastic indices"`
### Memcached
`"product:Memcached"`
### CouchDB
`"product:CouchDB"`
`port:"5984"+Server: "CouchDB/2.1.0"`
### PostgreSQL
`"port:5432 PostgreSQL"`
### Riak
`"port:8087 Riak"`
### Redis
`"product:Redis"`
### Cassandra
`"product:Cassandra"`
# Промышленные системы управления
### Электронные табло Samsung
`"Server: Prismview Player"`
### Контроллеры топливных колонок на АЗС
`"in-tank inventory" port:10001`
### Топливные колонки, подключенные к интернету:
Без авторизации для доступа к терминалу CLI.
`"privileged command" GET`
### Автоматические считыватели номерных знаков
`P372 "ANPR enabled"`
### Контроллеры светофоров / камеры на красный свет
`mikrotik streetlight`
### Машины для голосования в США
"voter system serial" country:US
### Открытые банкоматы:
Может предоставлять доступ к банкомату
`NCR Port:"161"`
### Телекоммуникации на Cisco с законным перехватом (Lawful Intercept)
`"Cisco IOS" "ADVIPSERVICESK9_LI-M"`
### Тюремные таксофоны
`"[2J[H Encartele Confidential"`
### Статус зарядки Tesla PowerPack
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Зарядные станции для электромобилей
`"Server: gSOAP/2.8" "Content-Length: 583"`
### Морские спутники
Shodan создал довольно удобный трекер кораблей, который отображает местоположение судов в реальном времени!
`"Cobham SATCOM" OR ("Sailor" "VSAT")`
### Панели управления подводными миссиями
`title:"Slocum Fleet Mission Control"`
### Холодильные агрегаты CAREL PlantVisor
`"Server: CarelDataServer" "200 Document follows"`
### Ветряные турбины Nordex
`http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"`
### GPS-трекеры коммерческих автомобилей C4 Max
`"[1m[35mWelcome on console"`
### Медицинские рентгеновские аппараты DICOM
По умолчанию защищены, к счастью, но эти 1700+ машин всё равно не должны находиться в интернете.
`"DICOM Server Response" port:104`
### Электрические счётчики GaugeTech
`"Server: EIG Embedded Web Server" "200 Document follows"`
### Промышленная автоматизация Siemens
`"Siemens, SIMATIC" port:161`
### Контроллеры HVAC Siemens
`"Server: Microsoft-WinCE" "Content-Length: 12581"`
### Контроллеры доступа / замков
`"HID VertX" port:4070`
### Управление железными дорогами
`"log off" "select the appropriate"`
### Статус зарядки Tesla Powerpack:
Помогает найти статус зарядки Tesla Powerpack.
`http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2`
### Ветряная турбина XZERES
`title:"xzeres wind"`
### Автоматический считыватель номерных знаков PIPS
`"html:"PIPS Technology ALPR Processors""`
### Modbus
`"port:502"`
### Niagara Fox
`"port:1911,4911 product:Niagara"`
### GE-SRTP
`"port:18245,18246 product:"general electric""`
### MELSEC-Q
`"port:5006,5007 product:mitsubishi"`
### CODESYS
`"port:2455 operating system"`
### S7
`"port:102"`
### BACnet
`"port:47808"`
### HART-IP
`"port:5094 hart-ip"`
### Omron FINS
`"port:9600 response code"`
### IEC 60870-5-104
`"port:2404 asdu address"`
### DNP3
`"port:20000 source address"`
### EtherNet/IP
`"port:44818"`
### PCWorx
`"port:1962 PLC"`
### Crimson v3.0
`"port:789 product:"Red Lion Controls"`
### ProConOS
`"port:20547 PLC"`
# Удаленный рабочий стол
### Незащищённый VNC
`"authentication disabled" port:5900,5901`
`"authentication disabled" "RFB 003.008"`
### Windows RDP
99.99% защищены дополнительным экраном входа в Windows.
`"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"`
# Инфраструктура C2
### Серверы CobaltStrike
`product:"cobalt strike team server"`
`product:"Cobalt Strike Beacon"`
`ssl.cert.serial:146473198` \- серийный номер сертификата по умолчанию
`ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1`
`ssl:foren.zik`
### Brute Ratel
`http.html_hash:-1957161625`
`product:"Brute Ratel C4"`
### Covenant
`ssl:”Covenant” http.component:”Blazor”`
### Metasploit
`ssl:"MetasploitSelfSignedCA"`
# Сетевая инфраструктура
### Взломанные роутеры:
Роутеры, которые были скомпрометированы
`hacked-router-help-sos`
### Открытые инстансы Redis
`product:"Redis key-value store"`
### Citrix:
Найти Citrix Gateway.
`title:"citrix gateway"`
### Панели Weave Scope
Доступ к командной строке внутри подов Kubernetes и контейнеров Docker, а также визуализация/мониторинг всей инфраструктуры в реальном времени.
`title:"Weave Scope" http.favicon.hash:567176827`
### Jenkins CI
`"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"`
### Jenkins:
Jenkins с неограниченной панелью
`x-jenkins 200`
### Docker API
`"Docker Containers:" port:2375`
### Приватные реестры Docker
`"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab`
### Открытые DNS-серверы Pi-hole
`"dnsmasq-pi-hole" "Recursion: enabled"`
### DNS-серверы с рекурсией
`"port: 53" Recursion: Enabled`
### Уже вошедшие как root через Telnet
`"root@" port:23 -login -password -name -Session`
### Доступ по Telnet:
Для доступа по Telnet не требуется пароль.
`port:23 console gateway`
### Polycom-видеоконференции без оболочки с авторизацией
`"polycom command shell"`
### NPort последовательные переходники / устройства MoCA без пароля
`nport -keyin port:23`
### Android Root Bridges
Побочный результат небрежного фрагментированного подхода Google к обновлениям. Более подробно здесь.
`"Android Debug Bridge" "Device" port:5555`
### Последовательные адаптеры Lantronix, утекающие пароли Telnet
`Lantronix password port:30718 -secured`
### Citrix Virtual Apps
`"Citrix Applications:" port:1604`
### Cisco Smart Install
Уязвимый (в некотором роде «по задумке», но особенно при открытом доступе).
`"smart install client active"`
### Шлюзы IP-телефонов PBX
`PBX "gateway console" -password port:23`
### Видеоконференции Polycom
`http.title:"- Polycom" "Server: lighttpd"`
`"Polycom Command Shell" -failed port:23`
### Конфигурация Telnet:
`"Polycom Command Shell" -failed port:23`
Пример: Видеоконференции Polycom
### Портал службы поддержки Bomgar
`"Server: Bomgar" "200 OK"`
### Intel Active Management CVE-2017-5689
`"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995`
`”Active Management Technology”`
### HP iLO 4 CVE-2017-12542
`HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900`
### Административный интерфейс Ethernet-адаптеров Lantronix без пароля
`"Press Enter for Setup Mode port:9999"`
### Пароли Wi-Fi:
Помогает найти пароли Wi-Fi в открытом виде в Shodan.
`html:"def_wirelesspassword"`
### Неправильно настроенные сайты WordPress:
При доступе к wp-config.php могут быть получены учётные данные базы данных.
`http.html:"* The wp-config.php creation script uses this file"`
# Outlook Web Access:
### Exchange 2007
`"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"`
### Exchange 2010
`"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392`
### Exchange 2013 / 2016
`"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"`
### Lync / Skype для бизнеса
`"X-MS-Server-Fqdn"`
# Сетевые хранилища (NAS)
### Файловые ресурсы SMB (Samba)
Даёт около 500 000 результатов… уточните, добавив «Documents» или «Videos» и т.д.
`"Authentication: disabled" port:445`
### Конкретно контроллеры доменов:
`"Authentication: disabled" NETLOGON SYSVOL -unix port:445`
### Распространённые сетевые папки по умолчанию для файлов QuickBooks:
`"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445`
### FTP-серверы с анонимным входом
`"220" "230 Login successful." port:21`
### Диски NAS Iomega / LenovoEMC
`"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"`
### Диски NAS Buffalo TeraStation
`Redirecting sencha port:9000`
### Медиасерверы Logitech
`"Server: Logitech Media Server" "200 OK"`
Пример: Медиасерверы Logitech
### Медиасерверы Plex
`"X-Plex-Protocol" "200 OK" port:32400`
### Панели Tautulli / PlexPy
`"CherryPy/5.1.0" "/home"`
### USB-накопители, подключённые к домашнему роутеру
`"IPC$ all storage devices"`
# Веб-камеры
### Общий поиск камер
`title:camera`
### Веб-камеры со скриншотами
`webcam has_screenshot:true`
### Веб-камеры D-Link
`"d-Link Internet Camera, 200 OK"`
### Hipcam
`"Hipcam RealServer/V1.0"`
### Yawcams
`"Server: yawcam" "Mime-Type: text/html"`
### webcamXP/webcam7
`("webcam 7" OR "webcamXP") http.component:"mootools" -401`
### Android IP Webcam Server
`"Server: IP Webcam Server" "200 OK"`
### Видеорегистраторы
`html:"DVR_H264 ActiveX"`
### Камеры наблюдения:
С логином admin и паролем :P
`NETSurveillance uc-httpd`
`Server: uc-httpd 1.0.0`
# Принтеры и копиры:
### Принтеры HP
`"Serial Number:" "Built:" "Server: HP HTTP"`
### Копиры/принтеры Xerox
`ssl:"Xerox Generic Root"`
### Принтеры Epson
`"SERVER: EPSON_Linux UPnP" "200 OK"`
`"Server: EPSON-HTTP" "200 OK"`
### Принтеры Canon
`"Server: KS_HTTP" "200 OK"`
`"Server: CANON HTTP Server"`
# Домашние устройства
### Стереосистемы Yamaha
`"Server: AV_Receiver" "HTTP/1.1 406"`
### Приёмники Apple AirPlay
Apple TV, HomePod и т.д.
`"\x08_airplay" port:5353`
### Chromecast / Smart TV
`"Chromecast:" port:8008`
### Умные домашние контроллеры Crestron
`"Model: PYNG-HUB"`
# Разное
### Библиотеки Calibre
`"Server: calibre" http.status:200 http.title:calibre`
### Контроллеры 3D-принтеров OctoPrint
`title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944`
### Майнеры Ethereum
`"ETH - Total speed"`
### Списки каталогов Apache
Замените .pem на любое расширение или имя файла, например phpinfo.php.
`http.title:"Index of /" http.html:".pem"`
### Неправильно настроенный WordPress
Открытые файлы wp-config.php, содержащие учётные данные базы данных.
`http.html:"* The wp-config.php creation script uses this file"`
### Слишком много серверов Minecraft
`"Minecraft Server" "protocol 340" port:25565`
### Буквально всё в Северной Корее
`net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24`