Questions tagged [shodan]

Shodan is a search engine indexing devices connected to the Internet.

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

Need examples for ztag

Can anyone provide some examples of ztag (https://github.com/zmap/ztag). I am trying to use it against a host that I found on the Internet, but ztag doesn't seem to handle the input sent to it, and ...
0
votes
0answers
36 views

RDP with self-signed cert requiring password before launching display

I've noticed that the search engine Shodan grabs screenshots from hosts running an RDP service, even if they offer a certificate. To my understanding, the certificate is used to authentify the server,...
0
votes
0answers
51 views

How does MS graph API (at ms azure) and Shodan categorise any IP as VPN, Tor, proxy or genuine ISP?

Can anybody tell me how Shodan categorises any IP by just taking one input as IP? 90% of the time it gives an accurate result, and also ms graph API also categorises IP address as anonymous, Tor etc ...
1
vote
2answers
178 views

How shodan takes screenshots?

How Shodan takes screenshots from some webcam even if this webcam (IP adress) requires login? And how can I protect this? I can't have some thing on LAN network, because I need to join to it from far ...
1
vote
2answers
369 views

How to search for all computers running memcached on shodan

Memcached is a caching software typically used in web servers. Many web servers like wikipedia, wordpress, flickr cache their data using Memcached software. Memcached server typically runs on port ...
1
vote
3answers
3k views

How to get shodan to report IP addresses with a specific open port?

I've done the leg work and I've struggled to identify how to search with the Shodan CLI, or the web search, just for a specific port and output all the IP addresses that expose this port. For ...
3
votes
2answers
2k views

Is external Nmap scan considered active or passive?

I had a debate recently regarding whether conducting an Nmap scan through a 3rd party such as pentest-tools.net is considered active or passive. I argued that it is passive since there is no link ...
2
votes
2answers
966 views

Proving that a MongoDB is misconfigured and publicly accessible

If Mongo databases appear on www.Shodan.io, is it definitive proof that they are publicly accessible? Is there a way to prove without doubt there is a risk without actually connecting to the server? (...