Hi, and welcome back after our basic IP address
and DNS research. In the previous video. The
video. This video is dedicated to the research of
devices that are connected to the internet or better to
say exposed to the internet from around the world. Welcome
to the world of iot search engines.
There are two most popular online resources for
that shodhan that IO and
sentences that I owe.
They are very similar, but also very different when using
them. I'll show you both of them, how
they look and some basic features and usage scenarios. First
is shown in that IO and you can find it on that address.
Shodhan. Shodan. .I
o Shah. Mardan is also known as
the Google for iot devices. Actually
internet of things just to the the mystify the
term iot.
In the broadest sense, the term iot encompasses everything
connected to the internet from Smart. Toasters over
routers to Fitness collars for dogs with
a tool or a search engine like shodhan, you
have the ability to check the exposure of those connected
devices. How do they look like
when facing the internet and buy that you can do an
exposure? Check of a system /. Divides them also see
if they have some known or unknown vulnerabilities.
As always there are two
As of this coin, the good and the bad, the
good guys like Network Security Professionals use
this site to identify potential holes and vulnerabilities of
their systems and the bad guys. The
black hat hackers, use it to illegally access
networks. And in altar devices. Allow
me to show you how it looks like.
Again, we will go with our browser to
the shodhan that I/O address.
As you can see, this is the search engine for The
Internet of Things.
There is a free option without registration and
an option with registration.
The main difference is in that is that
without registration. You cannot use any of
the advanced search operators. The best option
is to pay for the axis and take advantage of showdowns
full search capabilities. Now, I
will just search for one IP address without registration
in
the third box. I will put down a DOT,
a DOT eight.
Umbra search.
As you can see, I have received some data about this
dress. I know it's hostname. The
in is that Google?
I know it is located in these states and
Port 53, which is the DNS port is open, as
it should be.
Now, I will try to use some search operator.
Like country column.
HR.
And ups and error. We need an account.
Now, I will login and to show it how it
looks like.
Now, I'm logged in with my account and I will
again use the country operator country.
Column h r. That is the shortcode
for my country Croatia.
And search.
As you can see, we got over 175 thousand
results. 175,000 results.
Now, I will add a
port.
To my search.
Sews face.
Court, column 53.
Now, we got almost 9,000 results. You
can really narrow it down to end, find some pretty interesting
things.
Just use a public address space of a company and you
can usually find all kinds of things exposed, and
that happens only if the target company does not maintain
their security posture.
There is also an API of shodhan that can be integrated with
the reconnaissance tools different reconnaissance tools that we
will mention the next video.
And by that you can use shodhan capabilities.
At their full capacity in other tools.
Now back to our slide. I will just tell you a few things
about senses that I owe since. This is also
a search engine that enables researchers to ask
questions about the hopes and networks that comprise the
internet. It is known in the security
Community as the academic like search engine.
Since it is an anecdote to interact with project from the
University of Michigan USA. The backbone is
zmapp. And it it is also
web-based.
Has an API and and
drives on the SQL database since
its performs, weekly scans of the ipv4, internet
address space and all the data is transparently stored
in the accessible database. You
should really check it out.
Okay, now, hope you get a good understanding how to approach the
exposure part of devices and computer networks. And
now we're going to cover some of the most popular tools for
reconnaissance of it systems. So see you in the
next video.