Cheat Sheet : Shodan HQ

-
Shodan is considered the world's most dangerous search engine. The site scans the internet and finds public facing devices, I even found my router on there before! You can sign up for free but it limits the searches. Heres some examples:

 •Shodanhq:

http://www.shodanhq.com/?q=Fuji+xerox     some printers
http://www.shodanhq.com/?q=RTU  scada
http://www.shodanhq.com/search?q=sonicwall  sonicwall firewalls
http://www.shodanhq.com/search?q=%22cisco-ios%22+%22last-modified%22   cisco ios devices
 
http://www.shodanhq.com/search?q=cisco-ios+200  cisco devices with no login required
More specifically on that last one  http://209.56.171.1/xhome.htm
Zhone MALC is a full-featured multi-service access platform optimized for delivering voice, data, and video services over a pure packet access network.   

http://www.shodanhq.com/search?q=Zhone+SLMS  the default username is admin, default password is zhone
 
http://www.shodanhq.com/search?q=netgear&page=3  netgear routers defaults: admin:password
 
http://www.shodanhq.com/search?q=SmartAX+MT882  huawei routers  defaults:  admin:admin
 
http://www.shodanhq.com/search?q=port%3A137%20calea  lot of different anonymous logons to smb, ftp, etc
C7200-ADVIPSERVICESK9_LI-M  is lawful intercept of cisco routers. 

http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lawf_int.html   and http://www.cisco.com/en/US/tech/tk583/tk799/tsd_technology_support_protocol_home.html  and the shodan search here: 

http://www.shodanhq.com/search?q=C7200-ADVIPSERVICESK9_LI-M+country:hr
 
http://www.shodanhq.com/search?q=PUBLICLY-KNOWN+CREDENTIALS  cisco configuration publicly known credentials
 
http://www.shodanhq.com/search?q=%22Anonymous+ftp+is+still+available%22 
 
http://www.shodanhq.com/search?q=PHPSESSID%3D  session id searches
http://www.shodanhq.com/?q=lighttpd+1.4.16  webserver, metasploit exploit here: http://www.exploit-db.com/exploits/4391/
http://www.shodanhq.com/?q=storage+nas  Nas devices
http://www.shodanhq.com/?q=realvnc  real vnc

Comments

Post a Comment

Popular posts from this blog

Cheat Sheet : Wireshark

-
 Now that you know some command line packet sniffing, lets go over some wireshark display filters: * If you want to filter by a protocol, just type it in, like arp, dns, etc.   * If you click the analyze tab you can filter here as well   * If you did it by tp, you can go to preferences/protocols/tcp and take the check out of “relative sequence numbers” and they will show the real seq numbers   * Right click a packet and follow tcp stream to see the whole conversation between the client and the server . if you do this and you close out of the window you will see that the filter is listed for these packets   * A source filter can be applied to restrict the packet view in wireshark to only those packets that have source IP as mentioned in the filter. The filter applied in the example below is: ip.src == 10.10.10.5   * A destination filter can be applied to restrict the packet view in wireshark to only those packets that have destination IP as m...
Read more

Monitor and block SSH connection attempts

-
Monitor and block SSH connection attempts. Here is a simple guide for iptables... This will set iptables to default: ........ sudo iptables -P INPUT ACCEPT sudo iptables -P OUTPUT ACCEPT sudo iptables -P FORWARD ACCEPT Then flush the rules: sudo iptables -F INPUT sudo iptables -F OUTPUT sudo iptables -F FORWARD This allows you to view your current rules: $ sudo iptables -L ........ Install iptables-persistent package to save tables on reboot. $ sudo apt-get install iptables-persistent During the installation, you will asked if you want to save your current firewall rules. If you update your firewall rules and want to save the changes, run this command: $ sudo netfilter-persistent save $ sudo netfilter-persistent reload ........ With the following, an attacker is allowed to produce exactly 3 faulty logins in 2 minutes. Afterwards, they will be blocked for 120 seconds. 1) Add the following line to /etc/ssh/sshd...
Read more

Cheat Sheet : NetCat

-
Netcat is known by most hackers as the swiss army knife of hacking. Its a great tool to setup backdoors or just plain and simple tcp or udp connections. Heres a few examples of how you can use netcat: Lets do some exercises with it in Kali linux. Our VMs today are a kali linux  and a windows 7. First start by looking at the help file nc -h  1. Lets check to see what ports are listening,(first start the apache2 service) type: nc -v 80  2. If you had started the apache service on kali linux you should see it shows there as open  3. You can also set up a listener port, type: nc -lvp 1234  4. The l here is for listen, the v is for verbose, the p is to specify the port to listen on  5. Lets open up a second terminal window and use netcat to connect to the listener  6. In the second terminal type: nc 10.0.0.100 1234 and hit enter  7. The first terminal should show you connected  8. Now lets chat from the second terminal b...
Read more