Shodan: The scariest search engine on the Internet

Rigz · Jan 25, 2016

Don't know if any of you guys have checked this out yet.

"Shodan searchers have found control systems for a water park, a gas station, a hotel wine cooler and a crematorium. Cybersecurity researchers have even located command and control systems for nuclear power plants and a particle-accelerating cyclotron by using Shodan."
http://money.cnn.com/2013/04/08/technology/security/shodan/index.html

Shodan Website:
https://www.shodan.io/

Minimalist · Aug 29, 2018

7 Steps to Start Searching with Shodan

In the toolkit carried by hackers under any shade of hat, a search engine has become an essential component. Shodan, a search engine built to crawl and search Internet-connected devices, has become a go-to for researchers who want to quickly find the Internet-facing devices on an organization's network.

With skilled use, Shodan can present a researcher with the devices in an address range, the number of devices in a network, or any of a number of different results based on the criteria of the search.

There are many ways to approach Shodan, but the following seven steps will get you started in the right direction. Have you already begun with Shodan? Are you a Shodan ninja? What tips do you have for beginners? Share your thoughts in the comments.
Click to expand...

https://www.darkreading.com/iot/7-steps-to-start-searching-with-shodan/d/d-id/1332684

shmu26 · Aug 30, 2018

Thanks for these shares. I didn't know about Shodan.

guest · Nov 5, 2018

This Tool Shows Exposed Cameras Around Your Neighbourhood
November 5, 2018
https://motherboard.vice.com/en_us/article/59vm4x/tool-exposed-cameras-map-shodan-python-github

Whereas some researchers would ordinarily have to crawl through lists of open devices on the computer search engine Shodan, this new tool lets users enter an address to find nearby ones on a map.

“You can search [the] whole world and check if there is any open camera in [a] sensitive place,” the security researcher behind the tool, who goes by the handle Woj-ciech, writes in a blog post.

As Woj-ciech explains, the ‘Kamerka’ tool marries several different chunks of Python code together. It ultimately relies on Shodan to find the exposed cameras in the first place (those running the tool need to have a Shodan account with an API key). [...]

“With lot of luck, it can help you with OSINT investigations or geolocating photos,” Woj-ciech writes.
Click to expand...

kamerka - Build interactive map of cameras from Shodan
https://github.com/woj-ciech/kamerka

guest · Mar 27, 2019

New Shodan Tool Warns Organizations of Their Internet-Exposed Devices
March 27, 2019
https://www.darkreading.com/cloud/n...their-internet-exposed-devices/d/d-id/1334268

Famed Internet search engine Shodan this week rolled out a service that helps solve the underlying problem its tool exposes: The new Shodan Monitor alerts organizations about their devices left exposed on the public Internet.

"Every other week there's an exposed database leaking information or a consumer device that was misconfigured and is now exposing private data. The number of industrial control systems directly connected to the Internet without any authentication has been increasing at a rate of about 10% every year," says John Matherly, creator and founder of Shodan.

Shodan's Matherly says Monitor was built to be simple and inexpensive, and a tool for organizations with less technical know-how and resources. "From a strategic perspective, this is our first foray into creating services that don't require advanced technical knowledge.
Matherly says setting up Shodan Monitor – which is free to all paying Shodan members – takes less than a minute, and Shodan sends an email when it finds an exposed device.
Click to expand...

guest · Jun 11, 2019

Tool Links Internet-Exposed ICS to Google Street View
June 11, 2019
https://www.securityweek.com/tool-links-internet-exposed-ics-google-street-view

Launched in November 2018 by a researcher who uses the online moniker Wojciech, Kamerka was initially designed to identify nearby surveillance cameras exposed to the Internet.
The latest update made by Wojciech to Kamerka allows users to generate a map of exposed ICS in any country and link them to Google Street View.

“If you believe you have found place where industrial control systems are running, you can examine its physical security. By this I mean entrances of the building, windows, security cameras or parking lots nearby. It’s good to have a tool for red team assessments to plan operations,” the researcher explained.

The ICS part of the tool uses Shodan, Folium and the Google Street View API to create a map with images from Street View. It looks for various types of products and protocols, including Siemens S7, Tridium, General Electric, [...]
The researcher has pointed out that while a majority of the identified devices appear to be housed by unidentified buildings, he has found some exposed systems in hospitals and even power plants.
Click to expand...

guest · Nov 5, 2019

Kamerka OSINT tool shows your country's internet-connected critical infrastructure
November 5, 2019
https://www.zdnet.com/article/kamer...s-internet-connected-critical-infrastructure/

A Polish security researcher has created an open-source intelligence (OSINT) gathering tool that indexes information about sensitive internet-connected devices and plots their approximate location on a map.
KAMERKA
Named Kamerka ("camera" in Polish), the tool was released last year. The tool works on user-provided search queries. Kamerka takes these queries and uses search engines like Shodan and BinaryEdge to search for common brands of a particular device, and plot results on a Google Map.
While in its initial version Kamerka scanned only for security cameras -- hence the Kamerka name -- the tool has received several updates in the past year.

The reason why Kamerka is so effective is because many system administrators often have to manage large fleets of devices. Instead of using numerical values to identify equipment, they often use building names or full addresses to provide descriptions as accurate as possible.
Such information was also previously available on Shodan or BinaryEdge, but you'd only find it when searching for a very specific IP address. With Kamerka, all of this info is available on a map.
Click to expand...

Log in or Sign up

Shodan: The scariest search engine on the Internet

Rigz Registered Member

Minimalist Registered Member

shmu26 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Shodan: The scariest search engine on the Internet

Rigz Registered Member

Minimalist Registered Member

shmu26 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches