{"id":2612,"date":"2026-03-18T12:02:52","date_gmt":"2026-03-18T11:02:52","guid":{"rendered":"http:\/\/u239160.webh.me\/jakisproblem.pl\/?p=2612"},"modified":"2026-03-18T12:02:52","modified_gmt":"2026-03-18T11:02:52","slug":"shodan-dorks","status":"publish","type":"post","link":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/2026\/03\/18\/shodan-dorks\/","title":{"rendered":"Shodan Dorks"},"content":{"rendered":"
\n

Shodan Dorks by twitter.com\/lothos612<\/h3>\n

(https:\/\/github.com\/lothos612\/shodan\/blob\/main\/README.md)<\/h3>\n<\/div>\n
\n

Basic Shodan Filters<\/span><\/h1>\n<\/div>\n
<\/div>\n
\n

city:<\/h3>\n

<\/a><\/div>\n

Find devices in a particular city.\u00a0city:\"Bangalore\"<\/code><\/p>\n

\n

country:<\/h3>\n

<\/a><\/div>\n

Find devices in a particular country.\u00a0country:\"IN\"<\/code><\/p>\n

\n

geo:<\/h3>\n

<\/a><\/div>\n

Find devices by giving geographical coordinates.\u00a0geo:\"56.913055,118.250862\"<\/code><\/p>\n

\n

Location<\/h3>\n

<\/a><\/div>\n

country:us<\/code>\u00a0country:ru country:de city:chicago<\/code><\/p>\n

\n

hostname:<\/h3>\n

<\/a><\/div>\n

Find devices matching the hostname.\u00a0server: \"gws\" hostname:\"google\"<\/code>\u00a0hostname:example.com -hostname:subdomain.example.com<\/code>\u00a0hostname:example.com,example.org<\/code><\/p>\n

\n

net:<\/h3>\n

<\/a><\/div>\n

Find devices based on an IP address or \/x CIDR.\u00a0net:210.214.0.0\/16<\/code><\/p>\n

\n

Organization<\/h3>\n

<\/a><\/div>\n

org:microsoft<\/code>\u00a0org:\"United States Department\"<\/code><\/p>\n

\n

Autonomous System Number (ASN)<\/h3>\n

<\/a><\/div>\n

asn:ASxxxx<\/code><\/p>\n

\n

os:<\/h3>\n

<\/a><\/div>\n

Find devices based on operating system.\u00a0os:\"windows 7\"<\/code><\/p>\n

\n

port:<\/h3>\n

<\/a><\/div>\n

Find devices based on open ports.\u00a0proftpd port:21<\/code><\/p>\n

\n

before\/after:<\/h3>\n

<\/a><\/div>\n

Find devices before or after between a given time.\u00a0apache after:22\/02\/2009 before:14\/3\/2010<\/code><\/p>\n

\n

SSL\/TLS Certificates<\/h3>\n

<\/a><\/div>\n

Self signed certificates\u00a0ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com<\/code><\/p>\n

Expired certificates\u00a0ssl.cert.expired:true<\/code><\/p>\n

ssl.cert.subject.cn:example.com<\/code><\/p>\n

\n

Device Type<\/h3>\n

<\/a><\/div>\n

device:firewall<\/code>\u00a0device:router<\/code>\u00a0device:wap<\/code>\u00a0device:webcam<\/code>\u00a0device:media<\/code>\u00a0device:\"broadband router\"<\/code>\u00a0device:pbx<\/code>\u00a0device:printer<\/code>\u00a0device:switch<\/code>\u00a0device:storage<\/code>\u00a0device:specialized<\/code>\u00a0device:phone<\/code>\u00a0device:\"voip\"<\/code>\u00a0device:\"voip phone\"<\/code>\u00a0device:\"voip adaptor\"<\/code>\u00a0device:\"load balancer\"<\/code>\u00a0device:\"print server\"<\/code>\u00a0device:terminal<\/code>\u00a0device:remote<\/code>\u00a0device:telecom<\/code>\u00a0device:power<\/code>\u00a0device:proxy<\/code>\u00a0device:pda<\/code>\u00a0device:bridge<\/code><\/p>\n

\n

Operating System<\/h3>\n

<\/a><\/div>\n

os:\"windows 7\"<\/code>\u00a0os:\"windows server 2012\"<\/code>\u00a0os:\"linux 3.x\"<\/code><\/p>\n

\n

Product<\/h3>\n

<\/a><\/div>\n

product:apache<\/code>\u00a0product:nginx<\/code>\u00a0product:android<\/code>\u00a0product:chromecast<\/code><\/p>\n

\n

Customer Premises Equipment (CPE)<\/h3>\n

<\/a><\/div>\n

cpe:apple<\/code>\u00a0cpe:microsoft<\/code>\u00a0cpe:nginx<\/code>\u00a0cpe:cisco<\/code><\/p>\n

\n

Server<\/h3>\n

<\/a><\/div>\n

server: nginx<\/code>\u00a0server: apache<\/code>\u00a0server: microsoft<\/code>\u00a0server: cisco-ios<\/code><\/p>\n

\n

ssh fingerprints<\/h3>\n

<\/a><\/div>\n

dc:14:de:8e:d7:c1:15:43:23:82:25:81:d2:59:e8:c0<\/code><\/p>\n

\n

Web<\/h1>\n

<\/a><\/div>\n

\n

Pulse Secure<\/h3>\n

<\/a><\/div>\n

http.html:\/dana-na<\/code><\/p>\n

\n

PEM Certificates<\/h3>\n

<\/a><\/div>\n

http.title:\"Index of \/\" http.html:\".pem\"<\/code><\/p>\n

\n

Tor \/ Dark Web sites<\/h3>\n

<\/a><\/div>\n

onion-location<\/code><\/p>\n

\n

Databases<\/h1>\n

<\/a><\/div>\n

\n

MySQL<\/h3>\n

<\/a><\/div>\n

\"product:MySQL\"<\/code>\u00a0mysql port:\"3306\"<\/code><\/p>\n

\n

MongoDB<\/h3>\n

<\/a><\/div>\n

\"product:MongoDB\"<\/code>\u00a0mongodb port:27017<\/code><\/p>\n

\n

Fully open MongoDBs<\/h3>\n

<\/a><\/div>\n

\"MongoDB Server Information { \"metrics\":\"<\/code>\u00a0\"Set-Cookie: mongo-express=\" \"200 OK\"<\/code>\u00a0\"MongoDB Server Information\" port:27017 -authentication<\/code><\/p>\n

\n

Kibana dashboards without authentication<\/h3>\n

<\/a><\/div>\n

kibana content-legth:217<\/code><\/p>\n

\n

elastic<\/h3>\n

<\/a><\/div>\n

port:9200 json<\/code>\u00a0port:\"9200\" all:elastic<\/code>\u00a0port:\"9200\" all:\"elastic indices\"<\/code><\/p>\n

\n

Memcached<\/h3>\n

<\/a><\/div>\n

\"product:Memcached\"<\/code><\/p>\n

\n

CouchDB<\/h3>\n

<\/a><\/div>\n

\"product:CouchDB\"<\/code>\u00a0port:\"5984\"+Server: \"CouchDB\/2.1.0\"<\/code><\/p>\n

\n

PostgreSQL<\/h3>\n

<\/a><\/div>\n

\"port:5432 PostgreSQL\"<\/code><\/p>\n

\n

Riak<\/h3>\n

<\/a><\/div>\n

\"port:8087 Riak\"<\/code><\/p>\n

\n

Redis<\/h3>\n

<\/a><\/div>\n

\"product:Redis\"<\/code><\/p>\n

\n

Cassandra<\/h3>\n

<\/a><\/div>\n

\"product:Cassandra\"<\/code><\/p>\n

\n

Industrial Control Systems<\/h1>\n

<\/a><\/div>\n

\n

Samsung Electronic Billboards<\/h3>\n

<\/a><\/div>\n

\"Server: Prismview Player\"<\/code><\/p>\n

\n

Gas Station Pump Controllers<\/h3>\n

<\/a><\/div>\n

\"in-tank inventory\" port:10001<\/code><\/p>\n

\n

Fuel Pumps connected to internet:<\/h3>\n

<\/a><\/div>\n

No auth required to access CLI terminal.\u00a0\"privileged command\" GET<\/code><\/p>\n

\n

Automatic License Plate Readers<\/h3>\n

<\/a><\/div>\n

P372 \"ANPR enabled\"<\/code><\/p>\n

\n

Traffic Light Controllers \/ Red Light Cameras<\/h3>\n

<\/a><\/div>\n

mikrotik streetlight<\/code><\/p>\n

\n

Voting Machines in the United States<\/h3>\n

<\/a><\/div>\n

„voter system serial” country:US<\/p>\n

\n

Open ATM:<\/h3>\n

<\/a><\/div>\n

May allow for ATM Access availability\u00a0NCR Port:\"161\"<\/code><\/p>\n

\n

Telcos Running Cisco Lawful Intercept Wiretaps<\/h3>\n

<\/a><\/div>\n

\"Cisco IOS\" \"ADVIPSERVICESK9_LI-M\"<\/code><\/p>\n

\n

Prison Pay Phones<\/h3>\n

<\/a><\/div>\n

\"[2J[H Encartele Confidential\"<\/code><\/p>\n

\n

Tesla PowerPack Charging Status<\/h3>\n

<\/a><\/div>\n

http.title:\"Tesla PowerPack System\" http.component:\"d3\" -ga3ca4f2<\/code><\/p>\n

\n

Electric Vehicle Chargers<\/h3>\n

<\/a><\/div>\n

\"Server: gSOAP\/2.8\" \"Content-Length: 583\"<\/code><\/p>\n

\n

Maritime Satellites<\/h3>\n

<\/a><\/div>\n

Shodan made a pretty sweet Ship Tracker that maps ship locations in real time, too!<\/p>\n

\"Cobham SATCOM\" OR (\"Sailor\" \"VSAT\")<\/code><\/p>\n

\n

Submarine Mission Control Dashboards<\/h3>\n

<\/a><\/div>\n

title:\"Slocum Fleet Mission Control\"<\/code><\/p>\n

\n

CAREL PlantVisor Refrigeration Units<\/h3>\n

<\/a><\/div>\n

\"Server: CarelDataServer\" \"200 Document follows\"<\/code><\/p>\n

\n

Nordex Wind Turbine Farms<\/h3>\n

<\/a><\/div>\n

http.title:\"Nordex Control\" \"Windows 2000 5.0 x86\" \"Jetty\/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)\"<\/code><\/p>\n

\n

C4 Max Commercial Vehicle GPS Trackers<\/h3>\n

<\/a><\/div>\n

\"[1m[35mWelcome on console\"<\/code><\/p>\n

\n

DICOM Medical X-Ray Machines<\/h3>\n

<\/a><\/div>\n

Secured by default, thankfully, but these 1,700+ machines still have no business being on the internet.<\/p>\n

\"DICOM Server Response\" port:104<\/code><\/p>\n

\n

GaugeTech Electricity Meters<\/h3>\n

<\/a><\/div>\n

\"Server: EIG Embedded Web Server\" \"200 Document follows\"<\/code><\/p>\n

\n

Siemens Industrial Automation<\/h3>\n

<\/a><\/div>\n

\"Siemens, SIMATIC\" port:161<\/code><\/p>\n

\n

Siemens HVAC Controllers<\/h3>\n

<\/a><\/div>\n

\"Server: Microsoft-WinCE\" \"Content-Length: 12581\"<\/code><\/p>\n

\n

Door \/ Lock Access Controllers<\/h3>\n

<\/a><\/div>\n

\"HID VertX\" port:4070<\/code><\/p>\n

\n

Railroad Management<\/h3>\n

<\/a><\/div>\n

\"log off\" \"select the appropriate\"<\/code><\/p>\n

\n

Tesla Powerpack charging Status:<\/h3>\n

<\/a><\/div>\n

Helps to find the charging status of tesla powerpack.\u00a0http.title:\"Tesla PowerPack System\" http.component:\"d3\" -ga3ca4f2<\/code><\/p>\n

\n

XZERES Wind Turbine<\/h3>\n

<\/a><\/div>\n

title:\"xzeres wind\"<\/code><\/p>\n

\n

PIPS Automated License Plate Reader<\/h3>\n

<\/a><\/div>\n

\"html:\"PIPS Technology ALPR Processors\"\"<\/code><\/p>\n

\n

Modbus<\/h3>\n

<\/a><\/div>\n

\"port:502\"<\/code><\/p>\n

\n

Niagara Fox<\/h3>\n

<\/a><\/div>\n

\"port:1911,4911 product:Niagara\"<\/code><\/p>\n

\n

GE-SRTP<\/h3>\n

<\/a><\/div>\n

\"port:18245,18246 product:\"general electric\"\"<\/code><\/p>\n

\n

MELSEC-Q<\/h3>\n

<\/a><\/div>\n

\"port:5006,5007 product:mitsubishi\"<\/code><\/p>\n

\n

CODESYS<\/h3>\n

<\/a><\/div>\n

\"port:2455 operating system\"<\/code><\/p>\n

\n

S7<\/h3>\n

<\/a><\/div>\n

\"port:102\"<\/code><\/p>\n

\n

BACnet<\/h3>\n

<\/a><\/div>\n

\"port:47808\"<\/code><\/p>\n

\n

HART-IP<\/h3>\n

<\/a><\/div>\n

\"port:5094 hart-ip\"<\/code><\/p>\n

\n

Omron FINS<\/h3>\n

<\/a><\/div>\n

\"port:9600 response code\"<\/code><\/p>\n

\n

IEC 60870-5-104<\/h3>\n

<\/a><\/div>\n

\"port:2404 asdu address\"<\/code><\/p>\n

\n

DNP3<\/h3>\n

<\/a><\/div>\n

\"port:20000 source address\"<\/code><\/p>\n

\n

EtherNet\/IP<\/h3>\n

<\/a><\/div>\n

\"port:44818\"<\/code><\/p>\n

\n

PCWorx<\/h3>\n

<\/a><\/div>\n

\"port:1962 PLC\"<\/code><\/p>\n

\n

Crimson v3.0<\/h3>\n

<\/a><\/div>\n

\"port:789 product:\"Red Lion Controls\"<\/code><\/p>\n

\n

ProConOS<\/h3>\n

<\/a><\/div>\n

\"port:20547 PLC\"<\/code><\/p>\n

\n

Remote Desktop<\/h1>\n

<\/a><\/div>\n

\n

Unprotected VNC<\/h3>\n

<\/a><\/div>\n

\"authentication disabled\" port:5900,5901<\/code>\u00a0\"authentication disabled\" \"RFB 003.008\"<\/code><\/p>\n

\n

Windows RDP<\/h3>\n

<\/a><\/div>\n

99.99% are secured by a secondary Windows login screen.<\/p>\n

\"\\x03\\x00\\x00\\x0b\\x06\\xd0\\x00\\x00\\x124\\x00\"<\/code><\/p>\n

\n

C2 Infrastructure<\/h1>\n

<\/a><\/div>\n

\n

CobaltStrike Servers<\/h3>\n

<\/a><\/div>\n

product:\"cobalt strike team server\"<\/code>\u00a0product:\"Cobalt Strike Beacon\"<\/code>\u00a0ssl.cert.serial:146473198<\/code>\u00a0– default certificate serial number\u00a0ssl.jarm:07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1<\/code>\u00a0ssl:foren.zik<\/code><\/p>\n

\n

Brute Ratel<\/h3>\n

<\/a><\/div>\n

http.html_hash:-1957161625<\/code>\u00a0product:\"Brute Ratel C4\"<\/code><\/p>\n

\n

Covenant<\/h3>\n

<\/a><\/div>\n

ssl:\u201dCovenant\u201d http.component:\u201dBlazor\u201d<\/code><\/p>\n

\n

Metasploit<\/h3>\n

<\/a><\/div>\n

ssl:\"MetasploitSelfSignedCA\"<\/code><\/p>\n

\n

Network Infrastructure<\/h1>\n

<\/a><\/div>\n

\n

Hacked routers:<\/h3>\n

<\/a><\/div>\n

Routers which got compromised\u00a0hacked-router-help-sos<\/code><\/p>\n

\n

Redis open instances<\/h3>\n

<\/a><\/div>\n

product:\"Redis key-value store\"<\/code><\/p>\n

\n

Citrix:<\/h3>\n

<\/a><\/div>\n

Find Citrix Gateway.\u00a0title:\"citrix gateway\"<\/code><\/p>\n

\n

Weave Scope Dashboards<\/h3>\n

<\/a><\/div>\n

Command-line access inside Kubernetes pods and Docker containers, and real-time visualization\/monitoring of the entire infrastructure.<\/p>\n

title:\"Weave Scope\" http.favicon.hash:567176827<\/code><\/p>\n

\n

Jenkins CI<\/h3>\n

<\/a><\/div>\n

\"X-Jenkins\" \"Set-Cookie: JSESSIONID\" http.title:\"Dashboard\"<\/code><\/p>\n

\n

Jenkins:<\/h3>\n

<\/a><\/div>\n

Jenkins Unrestricted Dashboard\u00a0x-jenkins 200<\/code><\/p>\n

\n

Docker APIs<\/h3>\n

<\/a><\/div>\n

\"Docker Containers:\" port:2375<\/code><\/p>\n

\n

Docker Private Registries<\/h3>\n

<\/a><\/div>\n

\"Docker-Distribution-Api-Version: registry\" \"200 OK\" -gitlab<\/code><\/p>\n

\n

Pi-hole Open DNS Servers<\/h3>\n

<\/a><\/div>\n

\"dnsmasq-pi-hole\" \"Recursion: enabled\"<\/code><\/p>\n

\n

DNS Servers with recursion<\/h3>\n

<\/a><\/div>\n

\"port: 53\" Recursion: Enabled<\/code><\/p>\n

\n

Already Logged-In as root via Telnet<\/h3>\n

<\/a><\/div>\n

\"root@\" port:23 -login -password -name -Session<\/code><\/p>\n

\n

Telnet Access:<\/h3>\n

<\/a><\/div>\n

NO password required for telnet access.\u00a0port:23 console gateway<\/code><\/p>\n

\n

Polycom video-conference system no-auth shell<\/h3>\n

<\/a><\/div>\n

\"polycom command shell\"<\/code><\/p>\n

\n

NPort serial-to-eth \/ MoCA devices without password<\/h3>\n

<\/a><\/div>\n

nport -keyin port:23<\/code><\/p>\n

\n

Android Root Bridges<\/h3>\n

<\/a><\/div>\n

A tangential result of Google’s sloppy fractured update approach. More information here.<\/p>\n

\"Android Debug Bridge\" \"Device\" port:5555<\/code><\/p>\n

\n

Lantronix Serial-to-Ethernet Adapter Leaking Telnet Passwords<\/h3>\n

<\/a><\/div>\n

Lantronix password port:30718 -secured<\/code><\/p>\n

\n

Citrix Virtual Apps<\/h3>\n

<\/a><\/div>\n

\"Citrix Applications:\" port:1604<\/code><\/p>\n

\n

Cisco Smart Install<\/h3>\n

<\/a><\/div>\n

Vulnerable (kind of „by design,” but especially when exposed).<\/p>\n

\"smart install client active\"<\/code><\/p>\n

\n

PBX IP Phone Gateways<\/h3>\n

<\/a><\/div>\n

PBX \"gateway console\" -password port:23<\/code><\/p>\n

\n

Polycom Video Conferencing<\/h3>\n

<\/a><\/div>\n

http.title:\"- Polycom\" \"Server: lighttpd\"<\/code>\u00a0\"Polycom Command Shell\" -failed port:23<\/code><\/p>\n

\n

Telnet Configuration:<\/h3>\n

<\/a><\/div>\n

\"Polycom Command Shell\" -failed port:23<\/code><\/p>\n

Example: Polycom Video Conferencing<\/p>\n

\n

Bomgar Help Desk Portal<\/h3>\n

<\/a><\/div>\n

\"Server: Bomgar\" \"200 OK\"<\/code><\/p>\n

\n

Intel Active Management CVE-2017-5689<\/h3>\n

<\/a><\/div>\n

\"Intel(R) Active Management Technology\" port:623,664,16992,16993,16994,16995<\/code>\u00a0\u201dActive Management Technology\u201d<\/code><\/p>\n

\n

HP iLO 4 CVE-2017-12542<\/h3>\n

<\/a><\/div>\n

HP-ILO-4 !\"HP-ILO-4\/2.53\" !\"HP-ILO-4\/2.54\" !\"HP-ILO-4\/2.55\" !\"HP-ILO-4\/2.60\" !\"HP-ILO-4\/2.61\" !\"HP-ILO-4\/2.62\" !\"HP-iLO-4\/2.70\" port:1900<\/code><\/p>\n

\n

Lantronix ethernet adapter\u2019s admin interface without password<\/h3>\n

<\/a><\/div>\n

\"Press Enter for Setup Mode port:9999\"<\/code><\/p>\n

\n

Wifi Passwords:<\/h3>\n

<\/a><\/div>\n

Helps to find the cleartext wifi passwords in Shodan.\u00a0html:\"def_wirelesspassword\"<\/code><\/p>\n

\n

Misconfigured WordPress Sites:<\/h3>\n

<\/a><\/div>\n

The wp-config.php if accessed can give out the database credentials.\u00a0http.html:\"* The wp-config.php creation script uses this file\"<\/code><\/p>\n

\n

Outlook Web Access:<\/h1>\n

<\/a><\/div>\n

\n

Exchange 2007<\/h3>\n

<\/a><\/div>\n

\"x-owa-version\" \"IE=EmulateIE7\" \"Server: Microsoft-IIS\/7.0\"<\/code><\/p>\n

\n

Exchange 2010<\/h3>\n

<\/a><\/div>\n

\"x-owa-version\" \"IE=EmulateIE7\" http.favicon.hash:442749392<\/code><\/p>\n

\n

Exchange 2013 \/ 2016<\/h3>\n

<\/a><\/div>\n

\"X-AspNet-Version\" http.title:\"Outlook\" -\"x-owa-version\"<\/code><\/p>\n

\n

Lync \/ Skype for Business<\/h3>\n

<\/a><\/div>\n

\"X-MS-Server-Fqdn\"<\/code><\/p>\n

\n

Network Attached Storage (NAS)<\/h1>\n

<\/a><\/div>\n

\n

SMB (Samba) File Shares<\/h3>\n

<\/a><\/div>\n

Produces ~500,000 results…narrow down by adding „Documents” or „Videos”, etc.<\/p>\n

\"Authentication: disabled\" port:445<\/code><\/p>\n

\n

Specifically domain controllers:<\/h3>\n

<\/a><\/div>\n

\"Authentication: disabled\" NETLOGON SYSVOL -unix port:445<\/code><\/p>\n

\n

Concerning default network shares of QuickBooks files:<\/h3>\n

<\/a><\/div>\n

\"Authentication: disabled\" \"Shared this folder to access QuickBooks files OverNetwork\" -unix port:445<\/code><\/p>\n

\n

FTP Servers with Anonymous Login<\/h3>\n

<\/a><\/div>\n

\"220\" \"230 Login successful.\" port:21<\/code><\/p>\n

\n

Iomega \/ LenovoEMC NAS Drives<\/h3>\n

<\/a><\/div>\n

\"Set-Cookie: iomega=\" -\"manage\/login.html\" -http.title:\"Log In\"<\/code><\/p>\n

\n

Buffalo TeraStation NAS Drives<\/h3>\n

<\/a><\/div>\n

Redirecting sencha port:9000<\/code><\/p>\n

\n

Logitech Media Servers<\/h3>\n

<\/a><\/div>\n

\"Server: Logitech Media Server\" \"200 OK\"<\/code><\/p>\n

Example: Logitech Media Servers<\/p>\n

\n

Plex Media Servers<\/h3>\n

<\/a><\/div>\n

\"X-Plex-Protocol\" \"200 OK\" port:32400<\/code><\/p>\n

\n

Tautulli \/ PlexPy Dashboards<\/h3>\n

<\/a><\/div>\n

\"CherryPy\/5.1.0\" \"\/home\"<\/code><\/p>\n

\n

Home router attached USB<\/h3>\n

<\/a><\/div>\n

\"IPC$ all storage devices\"<\/code><\/p>\n

\n

Webcams<\/h1>\n

<\/a><\/div>\n

\n

Generic camera search<\/h3>\n

<\/a><\/div>\n

title:camera<\/code><\/p>\n

\n

Webcams with screenshots<\/h3>\n

<\/a><\/div>\n

webcam has_screenshot:true<\/code><\/p>\n

\n

D-Link webcams<\/h3>\n

<\/a><\/div>\n

\"d-Link Internet Camera, 200 OK\"<\/code><\/p>\n

\n

Hipcam<\/h3>\n

<\/a><\/div>\n

\"Hipcam RealServer\/V1.0\"<\/code><\/p>\n

\n

Yawcams<\/h3>\n

<\/a><\/div>\n

\"Server: yawcam\" \"Mime-Type: text\/html\"<\/code><\/p>\n

\n

webcamXP\/webcam7<\/h3>\n

<\/a><\/div>\n

(\"webcam 7\" OR \"webcamXP\") http.component:\"mootools\" -401<\/code><\/p>\n

\n

Android IP Webcam Server<\/h3>\n

<\/a><\/div>\n

\"Server: IP Webcam Server\" \"200 OK\"<\/code><\/p>\n

\n

Security DVRs<\/h3>\n

<\/a><\/div>\n

html:\"DVR_H264 ActiveX\"<\/code><\/p>\n

\n

Surveillance Cams:<\/h3>\n

<\/a><\/div>\n

With username:admin and password: \ud83d\ude1b\u00a0NETSurveillance uc-httpd<\/code>\u00a0Server: uc-httpd 1.0.0<\/code><\/p>\n

\n

Printers & Copiers:<\/h1>\n

<\/a><\/div>\n

\n

HP Printers<\/h3>\n

<\/a><\/div>\n

\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"<\/code><\/p>\n

\n

Xerox Copiers\/Printers<\/h3>\n

<\/a><\/div>\n

ssl:\"Xerox Generic Root\"<\/code><\/p>\n

\n

Epson Printers<\/h3>\n

<\/a><\/div>\n

\"SERVER: EPSON_Linux UPnP\" \"200 OK\"<\/code><\/p>\n

\"Server: EPSON-HTTP\" \"200 OK\"<\/code><\/p>\n

\n

Canon Printers<\/h3>\n

<\/a><\/div>\n

\"Server: KS_HTTP\" \"200 OK\"<\/code><\/p>\n

\"Server: CANON HTTP Server\"<\/code><\/p>\n

\n

Home Devices<\/h1>\n

<\/a><\/div>\n

\n

Yamaha Stereos<\/h3>\n

<\/a><\/div>\n

\"Server: AV_Receiver\" \"HTTP\/1.1 406\"<\/code><\/p>\n

\n

Apple AirPlay Receivers<\/h3>\n

<\/a><\/div>\n

Apple TVs, HomePods, etc.<\/p>\n

\"\\x08_airplay\" port:5353<\/code><\/p>\n

\n

Chromecasts \/ Smart TVs<\/h3>\n

<\/a><\/div>\n

\"Chromecast:\" port:8008<\/code><\/p>\n

\n

Crestron Smart Home Controllers<\/h3>\n

<\/a><\/div>\n

\"Model: PYNG-HUB\"<\/code><\/p>\n

\n

Random Stuff<\/h1>\n

<\/a><\/div>\n

\n

Calibre libraries<\/h3>\n

<\/a><\/div>\n

\"Server: calibre\" http.status:200 http.title:calibre<\/code><\/p>\n

\n

OctoPrint 3D Printer Controllers<\/h3>\n

<\/a><\/div>\n

title:\"OctoPrint\" -title:\"Login\" http.favicon.hash:1307375944<\/code><\/p>\n

\n

Etherium Miners<\/h3>\n

<\/a><\/div>\n

\"ETH - Total speed\"<\/code><\/p>\n

\n

Apache Directory Listings<\/h3>\n

<\/a><\/div>\n

Substitute .pem with any extension or a filename like phpinfo.php.<\/p>\n

http.title:\"Index of \/\" http.html:\".pem\"<\/code><\/p>\n

\n

Misconfigured WordPress<\/h3>\n

<\/a><\/div>\n

Exposed wp-config.php files containing database credentials.<\/p>\n

http.html:\"* The wp-config.php creation script uses this file\"<\/code><\/p>\n

\n

Too Many Minecraft Servers<\/h3>\n

<\/a><\/div>\n

\"Minecraft Server\" \"protocol 340\" port:25565<\/code><\/p>\n

\n

Literally Everything in North Korea<\/h3>\n

<\/a><\/div>\n

net:175.45.176.0\/22,210.52.109.0\/24,77.94.35.0\/24<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Shodan Dorks by twitter.com\/lothos612 (https:\/\/github.com\/lothos612\/shodan\/blob\/main\/README.md) Basic Shodan Filters city: Find devices in a particular city.\u00a0city:”Bangalore” country: Find devices in a particular country.\u00a0country:”IN” geo: Find devices by giving geographical coordinates.\u00a0geo:”56.913055,118.250862″ Location country:us\u00a0country:ru country:de city:chicago hostname: Find devices matching the hostname.\u00a0server: „gws” hostname:”google”\u00a0hostname:example.com -hostname:subdomain.example.com\u00a0hostname:example.com,example.org net: Find devices based on an IP address or \/x CIDR.\u00a0net:210.214.0.0\/16 Organization org:microsoft\u00a0org:”United…<\/p>\n

Read more →<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[167,168,166],"class_list":["post-2612","post","type-post","status-publish","format-standard","hentry","category-bez-kategorii","tag-dork","tag-osint","tag-shodan"],"_links":{"self":[{"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/posts\/2612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/comments?post=2612"}],"version-history":[{"count":1,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/posts\/2612\/revisions"}],"predecessor-version":[{"id":2613,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/posts\/2612\/revisions\/2613"}],"wp:attachment":[{"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/media?parent=2612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/categories?post=2612"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/u239160.webh.me\/jakisproblem.pl\/index.php\/wp-json\/wp\/v2\/tags?post=2612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}