This weekend at The Next HOPE conference Michael “theprez98” Schearer, a security researcher, gave a very interesting talk about SHODAN. SHODAN is a search engine which searches “banners” of systems. This means it’s basically a search engine of services on the internet. For example, with SHODAN you can find all servers running a specific version of Apache in a specific country. You also have the ability to export results in XML for a nominal fee. Check out the video of theprez98′s talk below. You can also find the slide-deck for theprez’s talk here. Please check your ethics before misusing SHODAN.
SHODAN for Penetration Testers (The Next Hope) from theprez98 on Vimeo.