Skip to main content Link Menu Expand (external link) Document Search Copy Copied

recon / shodan

Last update:

devices

cisco-ios 

# cisco ios - no password - HTTP return code 200
HTTP/1.0 200 Ok
Last-modififed: Tue, 08 Jun 1999 06:55:45 GMT
# cisco ios - no password - HTTP return code 401
HTTP/1.0 401 Unauthorized
Www-authenticate: Basic realm="level_15 or view_access"
# cisco ios - default password - HTTP return code 401
Www-authenticate: Basic realm="Default password:1234"

citrix 

# cve-2023-3519
citrix netscaler
ssl:"*contoso*" http.favicon.hash:-1292923998,-1166125415
ssl:"*contoso*" http.title:"*netscaler*"
ssl:"*contoso*" ja3:""

# basic
http.title:"Citrix Login"
http.title:citrix
http.title:"Endpoint Management - Console - Logon"
Citrix-TransactionId
http.waf:"Citrix NetScaler"

cyberoam-ssl-vpn 

ssl.cert.issuer.CN:Cyberoam

f5-big-ip 

http.title:"BIG-IP®- Redirect"
http.favicon.hash:-335242539
Server: BigIP

f5-vpn 

http.html:"BIG-IP logout"
Server: BigIP

juniper-router 

http.title:"Log In - Juniper Web Device Manager"

k8s 

ssl.cert.issuer.CN:kubernetes
# k8s API server
ssl.cert.subject.cn:kube-apiserver
ssl.cert.subject.cn:kube-apiserver "200 OK"

metasploit 

http.title:Metasploit
http.title:"Metasploit is initializing"
http.title:"Metasploit - Setup and Configuration"

mikrotik 

# last update: 20230921
# CVE-2018-7445 / RCE up to 6.38.4
# https://thehackernews.com/2021/12/over-300000-mikrotik-devices-found.html
http.title:"RouterOS router configuration page"
http.title:"Router"
os:"MikroTik"

oracle-e-business 

http.title:"E-Business Suite Home Page Redirect"
path=/OA_HTML -http.title:"E-Business Suite"

palo-globalprotect 

http.html:"Global Protect"

pulse-secure 

product:"Pulse Secure"
http.title:Pulse

rdp 

http.html:tdDomainUserNameLabel

sonicwall 

http.title:"Policy Jump"
http.title:"SonicWALL - Authentication"

vmware-esxi 

http.title:"\" + ID_EESX_Welcome + \""

zyxel 

ssl.cert.issuer.CN:ZyXEL

zte 

http.title:"F660"
ZTE corp

organization 

asn:123456
org:contoso

services

dns 

port:53 !HTTP

docker 

port:2375 !HTTP
port:5000 !HTTP

elasticsearch 

port:9200 !HTTP

ftp 

port:21 !HTTP

kerberos 

port:88 !HTTP

kibana 

port:5601 !HTTP

ldap 

port:389 !HTTP

mongodb 

port:27017 !HTTP

mysql 

port:3306 !HTTP

mssql 

port:1433 !HTTP

neo4j 

port:1433 !HTTP

nfs 

port:2049

postgresql 

port:5432 !HTTP

rdp 

port:3389 !HTTP

smb 

port:445 !HTTP

ssh 

port:22,2022,3022,4022,5022,6022,7022,8022,9022,10022,20022,30022,40022,50022,60022 !HTTP

vnc 

port:5900 !HTTP

winrm 

port:5985,5986 !HTTP

sources