Scribd Logo
Upload

Welcome to Scribd!

  • 130 views

    Shodan (Website) - Wikipedia

    Uploaded by

    Priscilla Felicia Harmanus
    Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.[1] This can be information about the server software, what options the service supports, a welcome message or anything else that the client can find out before interacting with the server. Shodan collects data mostly on web servers (HTTP/HTTPS - port 80, 8080, 443, 8443), as well as FTP (port 21), SSH (port 22), Telnet (port 23), SNMP (port 161), IMAP (port 993), SIP (port 5060),[2] and Real Time Streaming Protocol (RTSP, port 554). The latter can be used to access webcams and their video stream.[3] It was launched in 2009 by computer programmer John Matherly, who, in 2003,[4] conceived the idea of searching devices linked to the Internet.[5] The name Shodan is a reference to SHODAN, a character from the System Shock video game series.[4]

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Shodan (Website) - Wikipedia

    Uploaded by

    Priscilla Felicia Harmanus
    130 views7 pages
    Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.[1] This can be information about the server software, what options the service supports, a welcome message or anything else that the client can find out before interacting with the server. Shodan collects data mostly on web servers (HTTP/HTTPS - port 80, 8080, 443, 8443), as well as FTP (port 21), SSH (port 22), Telnet (port 23), SNMP (port 161), IMAP (port 993), SIP (port 5060),[2] and Real Time Streaming Protocol (RTSP, port 554). The latter can be used to access webcams and their video stream.[3] It was launched in 2009 by computer programmer John Matherly, who, in 2003,[4] conceived the idea of searching devices linked to the Internet.[5] The name Shodan is a reference to SHODAN, a character from the System Shock video game series.[4]

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.[1] This can be information about the server software, what options the service supports, a welcome message or anything else that the client can find out before interacting with the server. Shodan collects data mostly on web servers (HTTP/HTTPS - port 80, 8080, 443, 8443), as well as FTP (port 21), SSH (port 22), Telnet (port 23), SNMP (port 161), IMAP (port 993), SIP (port 5060),[2] and Real Time Streaming Protocol (RTSP, port 554). The latter can be used to access webcams and their video stream.[3] It was launched in 2009 by computer programmer John Matherly, who, in 2003,[4] conceived the idea of searching devices linked to the Internet.[5] The name Shodan is a reference to SHODAN, a character from the System Shock video game series.[4]

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    130 views7 pages

    Shodan (Website) - Wikipedia

    Uploaded by

    Priscilla Felicia Harmanus
    Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.[1] This can be information about the server software, what options the service supports, a welcome message or anything else that the client can find out before interacting with the server. Shodan collects data mostly on web servers (HTTP/HTTPS - port 80, 8080, 443, 8443), as well as FTP (port 21), SSH (port 22), Telnet (port 23), SNMP (port 161), IMAP (port 993), SIP (port 5060),[2] and Real Time Streaming Protocol (RTSP, port 554). The latter can be used to access webcams and their video stream.[3] It was launched in 2009 by computer programmer John Matherly, who, in 2003,[4] conceived the idea of searching devices linked to the Internet.[5] The name Shodan is a reference to SHODAN, a character from the System Shock video game series.[4]

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 7

    Shodan (website) - Wikipedia 09-01-18 06(34

    Shodan (website)
    This article is about the search engine. For other uses, see Shodan
    (disambiguation).

    Shodan is a search engine that lets the user find specific types of
    computers (webcams, routers, servers, etc.) connected to the internet using
    a variety of filters. Some have also described it as a search engine of service
    banners, which are metadata that the server sends back to the client.[1] This
    can be information about the server software, what options the service
    supports, a welcome message or anything else that the client can find out
    before interacting with the server.

    Shodan collects data mostly on web servers (HTTP/HTTPS - port 80,


    8080, 443, 8443), as well as FTP (port 21), SSH (port 22), Telnet (port 23),
    SNMP (port 161), IMAP (port 993), SIP (port 5060),[2] and Real Time
    Streaming Protocol (RTSP, port 554). The latter can be used to access
    webcams and their video stream.[3]

    It was launched in 2009 by computer programmer John Matherly, who, in


    2003,[4] conceived the idea of searching devices linked to the Internet.[5]
    The name Shodan is a reference to SHODAN, a character from the System
    Shock video game series.[4]

    Background

    The website began as Matherly's pet project, based on the fact that large
    numbers of devices and computer systems are connected to the Internet.
    Shodan users are able to find systems including traffic lights, security
    cameras, home heating systems as well as control systems for water parks,
    gas stations, water plants, power grids, nuclear power plants and particle-
    accelerating cyclotrons;[citation needed] most have little security.[5][6] Many
    devices use "admin" as their user name and "1234" as their password, and

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 1 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    the only software required to connect to them is a web browser.[6]

    Media coverage

    In May 2013, CNN Money released an article detailing how SHODAN can
    be used to find dangerous systems on the Internet, including traffic light
    controls. They show screenshots of those systems, which provided the
    warning banner "DEATH MAY OCCUR !!!" upon connecting.[7]

    In September 2013, Shodan was referenced in a Forbes article claiming it


    was used in order to find the security flaws in TRENDnet security cameras.
    [8] The next day, Forbes followed up with a second article talking about the

    types of things that can be found using Shodan. This included Caterpillar
    trucks whose onboard monitoring systems were accessible, heating and
    security control systems for banks, universities, and corporate giants,
    surveillance cameras, and fetal heart monitors.[9]

    In January 2015, Shodan was discussed in a CSO Online article[10]


    addressing its pros and cons. According to one opinion, presented in the
    article as that of Hagai Bar-El, Shodan actually gives the public a good
    service, although it highlights vulnerable devices. This perspective is also
    described in one of his essays.[11]

    In December 2015, various news outlets, including Ars Technica, reported


    that a security researcher used Shodan to identify accessible MongoDB
    databases on thousands of systems, including one hosted by Kromtech, the
    developer of the OS/X security tool MacKeeper.[12]

    Usage

    The website crawls the Internet for publicly accessible devices,


    concentrating on SCADA (supervisory control and data acquisition)
    systems.[13] Shodan currently returns 10 results to users without an
    account and 50 to those with one. If users want to remove the restriction,

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 2 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    they are required to provide a reason and pay a fee.[6] The primary users of
    Shodan are cybersecurity professionals, researchers and law enforcement
    agencies. While cybercriminals can also use the website, some typically
    have access to botnets that could accomplish the same task without
    detection.[6]

    Automated search tools

    SHODAN Diggity - Provides a free, easy-to-use scanning interface to


    the SHODAN search engine.

    Bulk searching and processing of SHODAN queries can be performed using


    SHODAN Diggity[14][15] (part of SearchDiggity, Bishop Fox's free search
    engine attack tool suite). The free tool provides an easy-to-use scanning
    interface to the popular hacking search engine via the SHODAN API.[16]

    SHODAN Diggity comes equipped with convenient list of 167 search


    queries ready in a pre-made dictionary file, known as the SHODAN
    Hacking Database (SHDB).[15] This dictionary helps target various
    technologies including webcams, printers, VoIP devices, routers, toasters,
    switches, and even SCADA/Industrial Control Systems (ICS) to name just a

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 3 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    few.

    Ongoing monitoring via RSS feeds

    SHODAN Hacking Alerts - Monitoring RSS Feeds in


    Reader

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 4 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    SHODAN Hacking Alerts - Creating RSS Feeds

    SHODAN Hacking Alerts[17] are live vulnerability RSS feeds regularly


    pulling search results from the SHODAN search engine. Bishop Fox's free
    defensive tools incorporate SHODAN data into its defense alerts by
    utilizing the feature to turn SHODAN search results into RSS feeds by
    appending &feed=1 to common SHODAN query URLs. As an example:
    https://www.shodanhq.com/?q=Default+Password&feed=1

    These free RSS alerts can be utilized to perform ongoing monitoring of


    SHODAN results for any new vulnerability exposures related to
    organizations. They are part of the free defensive tool suite of the Google
    Hacking Diggity Project,[18] which form a type of intrusion detection
    system for search engine hacking (including results from SHODAN,
    Google, Bing, etc.).

    Popular culture

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 5 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    Shodan was featured on the American drama series Mr. Robot on October
    2017.

    References

    1. ^ "SHODAN Help". SHODAN. Retrieved 21 June 2013.


    2. ^ "SHODAN FAQ". SHODAN. Retrieved 21 June 2013.
    3. ^ Shodan: The IoT search engine for watching sleeping kids and
    bedroom antics
    4. ^ a b O’Harrow Jr, Robert (June 3, 2012). "Search engine exposes
    industrial-sized dangers". Sydney Morning Herald. Retrieved April
    10, 2013.
    5. ^ a b O’Harrow Jr, Robert (June 3, 2012). "Cyber search engine
    Shodan exposes industrial control systems to new risks". Washington
    Post. Retrieved April 8, 2013.
    6. ^ a b c d Goldman, David (April 8, 2013). "Shodan: The scariest
    search engine on the Internet". CNN Money. Retrieved April 8, 2013.
    7. ^ Goldman, David (May 2, 2013). "Shodan finds the Internet's most
    dangerous spots". CNN Money. Retrieved June 21, 2013.
    8. ^ Hill, Kashmir. "Camera Company That Let Hackers Spy On Naked
    Customers Ordered By FTC To Get Its Security Act Together".
    Retrieved 2013-10-17.
    9. ^ Hill, Kashmir. "The Crazy Things A Savvy Shodan Searcher Can
    Find Exposed On The Internet". Retrieved 2013-10-17.
    10. ^ "Shodan exposes IoT vulnerabilities". Retrieved 2015-01-13.
    11. ^ "Shodan makes us all more secure". Retrieved 2015-01-13.
    12. ^ Degeler, Andrii. "13 million MacKeeper users exposed after
    MongoDB door was left open".
    13. ^ Brinkmann, Martin (April 9, 2013). "Shodan, a search engine for
    vulnerable Internet devices". ghacks.net. Retrieved April 9, 2013.
    14. ^ Brown, Francis; Ragan, Rob (29 July 2012). "Tenacious Diggity:
    Skinny Dippin' in a Sea of Bing". DEF CON 20.
    15. ^ a b "SHODAN Diggity". Bishop Fox. Retrieved 21 June 2013.

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 6 van 7


    Shodan (website) - Wikipedia 09-01-18 06(34

    16. ^ "SHODAN Developer API". SHODAN. Retrieved 21 June 2013.


    17. ^ "SHODAN Hacking Alerts". Bishop Fox. Retrieved 21 June 2013.
    18. ^ "Google Hacking Diggity Project". Bishop Fox. Retrieved 21 June
    2013.

    External links

    Shodan - Computer Search Engine - Main Site

    https://en.wikipedia.org/wiki/Shodan_(website) Pagina 7 van 7

    You might also like