#!/usr/bin/env python
"""
Exploit trigger was presented @reconbrx 2018
Vulnerability found and documented by synacktiv:
wwwsynacktivcom/posts/exploit/rce-vulnerability-in-hp-ilohtml
Original advisory from HP:
supporthpecom/hpsc/doc/public/display?docId=hpesbhf03769en_us
Other advisories for this CVE:
toolsciscocom ...
scheat sheet algunas busqueda o comando avanzada para buscar Dork en Google, Github y Shodan
Dorking
scheat sheet algunas busqueda o comando avanzada para buscar Dork en Google, Github y Shodan
TOOOOOLS importante dorks_hunterpy hecha en python3
python3 dorks_hunterpy -d vulnwebcom -r 2 -o testtxt
REVISAR
webarchiveorg/cdx/search/cdx?url=googlecom/api/*&output=text&fl=original&collapse=url
Subverting your server through its BMC: the HPE iLO4 case
Introduction
iLO is the server management solution embedded in almost every HPE
servers for more than 10 years It provides every feature required by a system
administrator to remotely manage a server without having to reach it
physically Such features include power management, remote system console,
remote CD/DVD imag
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Shodan Dorks by twittercom/lothos612
Feel free to make suggestions
Shodan Dorks
Basic Shodan Filters
city:
Find devices in a particular city
city:"Bangalore"
country:
Find devices in a particular country
country:"IN"
geo:
Find devices by giving geographical coordinates
geo:"56913055,118250862"
Location
country:us
country:ru country:de city:ch
jakejarvis (awesome shodan queries)
githubcom/jakejarvis/awesome-shodan-queries
Readmemd
***Awesome Shodan Search Queries Awesome
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancie
Useful Dorks and improving Search
Report
Issue
<-->
Add Dork
+-----------------------------------------------------------------------------+
| [!] Legal disclaimer: Usage of these dorks for attacking targets without |
| prior mutual consent is illegal |
| It is the
Shodan Dorks by twittercom/lothos612
Feel free to make suggestions
Shodan Dorks
Basic Shodan Filters
city:
Find devices in a particular city
city:"Bangalore"
country:
Find devices in a particular country
country:"IN"
geo:
Find devices by giving geographical coordinates
geo:"56913055,118250862"
Location
country:us
country:ru country:de city:ch
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
IS
HITCON Pacific Day 1
Temp
惡意知識庫
owlnchcorgtw/
drivegooglecom/open?id=1hNKwzxx5QuPjn1wTKguwGLmgzVW9etsc
drivegooglecom/open?id=0B9qqqzOjzwW9UFUxY1Rlb0diS00
drivegooglecom/file/d/0B6cOjCkh6yRSeEc1a0hnaHU3aGM/view?usp=sharing
TeamViewer Hack Could Be Used By Anyone
thehackernewscom/2017/12/teamviewer-hacking-toolhtml
psBerries
psBerries is my collection of PowerShell scripts
Of course, all the scripts have been written by me (Marco Bellaccini - marcobellaccini(at!)gmailcom)
and are released under Creative Commons CC0 10 license
evtDetective
A PowerShell script that queries Windows computers in a certain Active Directory OU for
some event in event logs
You can change the target OU and
Shodan dorks
Description:
This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in various types of devices such as webcams, routers, and servers This resou
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Table of Contents
Industrial Control Systems
Remote Desktop
Network Infrastructure
Network Attached Storage (NAS)
Webcams
Printers & Copiers
Home Devices
Random Stuff
Industrial Control Systems
Samsung Electronic Billboards 🔎 →
"Server: Prismview Player"
Gas Station Pump Controllers 🔎 →
"in-tank
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
Awesome Shodan Search Queries
Over time, we've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Awesome Shodan Search Queries
Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search engine Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild
Most search filters require a Shodan account
You can assume these queries
Vulmon