In January 2024, a Shodan search revealed 622 exposed unique IP gateways running #APISIX services, 39 of which were entirely open and exposed sensitive data.

Learn about the potential dangers of exposed APISIX services here:⬇️ research.trendmicro.com/3PhLCCW

CVEDB API - Fast Vulnerability Lookups cvedb.shodan.io #Pentesting #Vulnerability#CyberSecurity #Infosec

We've added EPSS and KEV to the vulnerability data. The enrichment is powered by the new cvedb.shodan.io

Identifying Phishing Pages with Shodan | by montysecurity | Medium montysecurity.medium.com/identifying-ph…

Reminder that we offer free, automatic upgrades to users that sign up with an academic email address (.edu, .ac.uk etc.): help.shodan.io/the-basics/aca…

Exposure Observatory now showing the number of Pulse Secure instances in a country. For example: exposure.shodan.io/#/US

Proactively Finding Command & Control Infrastructure: blog.shodan.io/deep-dive-malw…

Deep dive on the http.favicon property and introduction of the favscan tool: blog.shodan.io/deep-dive-http…

2009: John Matherly announced the public beta launch of Shodan (Shodan) - the first search engine for internet-connected devices.

ShodanBot

A #Discord bot to interact with the #Shodan API, allowing users to fetch information about devices, services, and vulnerabilities.

github.com/RocketGod-git/…

#OSINT #cybersecurity #infosec

Added tracking of the Cisco IOS XE exposure to the Internet Exposure Observatory: exposure.shodan.io/#/US

If you've configured Shodan Monitor then you automatically get a private, real-time data feed of asset info that you can subscribe to. We also have integrations with Splunk and Gravwell to help you build your own archive of Internet-facing infrastructure: help.shodan.io/shodan-monitor…

Google Chronicle has an integration with Shodan on their marketplace that lets you lookup IPs, perform DNS queries, launch scans and more: cloud.google.com/chronicle/docs…

Improvements to the IP information page on Shodan: blog.shodan.io/changelog-www-…

Shodan Trends now has an API: blog.shodan.io/developer-acce…

Here are some Shodan dorks that bug bounty hunters can use to discover potentially vulnerable or misconfigured devices:

1. Apache Default Page:
apache country:'YOUR_COUNTRY_CODE' title:'Index of /' -'Forbidden'

2. Default Login Pages:
'login:' 'password'…

The Membership sale is now over!

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: account.shodan.io/billing/member

#MoveIT detection trend country GB

QackBot infra 🎯

Hunting rule 👇

http.html_hash:501510358 ssl.jarm:'21d14d00021d21d21c42d43d0000007abc6200da92c2a1b69c0a56366cbe21'

shodan.io/search?query=h…

Happy Hunting! 🎯