3 ms·
Shodan – Search Engine for the Internet of Everything
- koolala 2y agoThis name is scary. How does it work? I hope FF makes a local, secure, offline SE.
- chrisandchris 2y agoShodan does exist for quite some time already. It's basically port-scanning the internet all the time.
- threecheese 2y agoWhen it first came out - and i’d say much less restricted for community use - it was a step change in my understanding of the extent of observability in place on the internet. I knew the NSA “was out there”, but never knew one could browse, StumbleUpon-style, random internet services and knock on their doors. At the time I dealt with a lot of smaller internet-facing applications, and was excited about being able to search for public instances of them and worried about others finding mine.
- koolala 2y agoEvery message on Discord... dear... ai...
- quenix 2y agoWhat name? "Shodan"? Why is it scary?
- Sajarin 2y agoShodan is the villain from System Shock: https://shodan.fandom.com/wiki/SHODAN https://shodan.fandom.com/wiki/SHODAN > SHODAN watches from Security Cameras, stares out of screens and monitors, sends threats and snide messages over the Station's PA system or via email to the player's data reader, and sometimes cuts off communications from friendly sources.
- koolala 2y agoHi i am friendly
- pxeger1 2y ago"Search Engine for the Internet of Everything"
- enahs-sf 2y agoShodan is first degree in Japanese martial arts or the go board game. Other stuff too like tea ceremony or calligraphy.
- iamaredpanda 2y agoBanner grabs, port knocking, ssl fingerprinting, application fingerprinting etc.
- jacekm 2y agoThere is a finite number of IPv4 addresses, you can simply open TCP connection to each of them on multiple ports and index everything that is returned. There are tools to do this by yourself (the only challenge is to find a provider that won't ban you for scanning the entire internet). There are also other services that do the same thing (e.g. ZoomEye, Censys, FOFA) For IPv6 there are too many addresses to scan them all so obtaining an IP to scan is a slightly different story (e.g. https://arstechnica.com/information-technology/2016/02/using-ipv6-with-linux-youve-likely-been-visited-by-shodan-and-other-scanners/ https://arstechnica.com/information-technology/2016/02/using...) but once you get the address the scanning process looks the same.
- frereubu 2y agoFrom ten years ago: https://news.ycombinator.com/item?id=5512477 https://news.ycombinator.com/item?id=5512477
- senectus1 2y agoIts not super reliable. I pointed it to my home domains where i know i have about ten port forwards and it's only seeing two of them.
- tlavoie 2y agoIt's probably scanning most common ports first, so covering breadth of IPs rather than completeness of results. Out of curiosity, have you tried scanning your external IP with Nmap, enabling all ports?