Today I was amazed by what these search engines can do
https://www.shodan.io/
Shodan search engine presents internet connected devices. What does this mean for me? I can find live servers running with specific versions, find IoT devices etc.
https://search.censys.io/
This amazing engine provides searching of hosts, websites, certificates, mail servers, databases etc.
Now what are the use cases for me as a researcher?
- Identify the exposed services that could be an entry point for an attack
- detect systems with outdated software or vulnerable protocols
- ensure compliance of infrastructure with security policies
- investigate malicious IP addresses, server configurations, open ports
https://haveibeenpwned.com/
Do I want to know if my email address is in a data breach, this engine will tell me how many data breaches and how many times it was pasted. Quite fancy
https://www.virustotal.com/gui/home/upload
Virustotal is a really great place to check if a website is safe to visit, also let you upload doubtful files and it will tell you if it is malicious. Moreover it can search for a hash, domain and IP address
Top comments (0)