awesome-shodan-queries - 🔍 A collection of interesting, funny, and depressi

项目说明

Awesome Shodan Search Queries ![Awesome]()

Over time, I' an assortment of interesting, funny, and depressing search queries to plug into Shodan, the (literal) internet search 引擎. Some return facepalm-inducing results, while others return serious and/or ancient in the wild.

<p align="center">
<img src="screenshots/shodan.png" /><br />
<strong><a href=" search filters require a Shodan account.</a></strong>
</p>

You can assume these queries only return unsecured/open instances when possible. For your own legal benefit, do not attempt to login (even with default passwords) if they aren't! Narrow down results by adding filters like country:US or org:"Harvard Uni" or hostname:"nasa.gov" to the end.

The world and its devices are quickly becoming more connected through the shiny new Internet of ~~Things~~ Sh*t — and exponentially more dangerous as a result. To that end, I hope this list spreads awareness (and, quite frankly, pant-wetting fear) rather than harm.

And as always, discover and disclose responsibly! 🤓

---

Table of Contents

---

Industrial Control Systems

Samsung Electronic Billboards 🔎 &#x2192;

<di="center"><img src="screenshots/billboard3.png" alt="Example: Electronic Billboards" width="500" /></div>

Gas Station Pump Controllers 🔎 &#x2192;

<di="center"><img src="screenshots/7-11.png" alt="Example: Gas Station Pump In" width="700" /></div>

Automatic License Plate Readers 🔎 &#x2192;

<di="center"><img src="screenshots/plate-reader.png" alt="Example: Automatic License Plate Reader" /></div>

Traffic Light Controllers / Red Light Cameras 🔎 &#x2192;

Machines in the United States 🔎 &#x2192;

Telcos Running Cisco Lawful Intercept Wiretaps 🔎 &#x2192;

Wiretapping mechanism outlined by Cisco in RFC 3924:

> Lawful intercept is the lawfully authorized interception and monitoring of communications of an intercept subject. The term "intercept subject" [...] refers to the subscriber of a telecommunications service whose communications and/or intercept related information (IRI) has been lawfully authorized to be intercepted and delivered to some agency.

Prison Pay Phones 🔎 &#x2192;

Tesla PowerPack Charging Status 🔎 &#x2192;

<di="center"><img src="screenshots/tesla.png" alt="Example: Tesla PowerPack Charging Status" /></div>

Electric Chargers 🔎 &#x2192;

Maritime Satellites 🔎 &#x2192;

Shodan made a pretty sweet Ship Tracker that maps ship locations in real time, too!

<di="center"><img src="screenshots/sailor-vsat.png" alt="Example: Maritime Satellites" width="700" /></div>

Submarine Mission Control Dashboards 🔎 &#x2192;

CAREL PlantVisor Refrigeration Units 🔎 &#x2192;

<di="center"><img src="screenshots/refrigeration.png" alt="Example: CAREL PlantVisor Refrigeration Units" /></div>

Nordex Wind Turbine Farms 🔎 &#x2192;

C4 Max Commercial GPS Trackers 🔎 &#x2192;

<di="center"><img src="screenshots/c4max.png" alt="Example: C4 Max GPS" width="780" /></div>

DICOM Medical X-Ray Machines 🔎 &#x2192;

Secured by default, thankfully, but these 1,700+ machines still have no business being on the internet.

GaugeTech Electricity Meters 🔎 &#x2192;

<di="center"><img src="screenshots/power-gaugetech.png" alt="Example: GaugeTech Electricity Meters" width="650" /></div>

Siemens Industrial Automation 🔎 &#x2192;

Siemens H 🔎 &#x2192;

Door / Lock Access Controllers 🔎 &#x2192;

Railroad Management 🔎 &#x2192;

---

Remote Desktop

Unprotected VNC 🔎 &#x2192;

Shodan Images is a great supplementary 工具 to browse screenshots, by the way! 🔎 &#x2192;

<p align="center">
<img src="screenshots/vnc.png" alt="Example: Unprotected VNC" /><br />
<em>The first result right now. 😞</em>
</p>

Windows RDP 🔎 &#x2192;

99.99% are secured by a secondary Windows login screen.

---

Network Infrastructure

Wea Dashboards 🔎 &#x2192;

Command-line access inside Kubernetes pods and Docker containers, and real-time /monitoring of the entire infrastructure.

<di="center"><img src="screenshots/wea.png" alt="Example: Wea Dashboards" /></div>

MongoDB 🔎 &#x2192;

Older were insecure by default. Very scary.

<di="center"><img src="screenshots/mongo.png" alt="Example: MongoDB" width="500" /></div>

Mongo Express Web GUI 🔎 &#x2192;

Like the infamous phpMyAdmin but for MongoDB.

<di="center"><img src="screenshots/mongo-express.png" alt="Example: Mongo Express 界面" width="700" /></div>

Jenkins CI 🔎 &#x2192;

<di="center"><img src="screenshots/jenkins.png" alt="Example: Jenkins CI" width="700" /></div>

Docker APIs 🔎 &#x2192;

Docker Private Registries 🔎 &#x2192;

Pi-hole Open DNS Servers 🔎 &#x2192;

Already Logged-In as root 🔎 &#x2192;

Android Root Bridges 🔎 &#x2192;

A tangential result of Google's sloppy fractured update approach. 🙄 More information here.

Lantronix Serial-to-Ethernet Adapter Leaking Telnet Passwords 🔎 &#x2192;

Citrix Apps 🔎 &#x2192;

<di="center"><img src="screenshots/citrix.png" alt="Example: Citrix Apps" width="700" /></div>

Cisco Smart Install 🔎 &#x2192;

(kind of "by design," but especially when exposed).

PBX IP Phone Gateways 🔎 &#x2192;

Polycom Video Conferencing 🔎 &#x2192;

Telnet Configuration: 🔎 &#x2192;

<di="center"><img src="screenshots/polycom.png" alt="Example: Polycom Video Conferencing" /></div>

Bomgar Help Desk Portal 🔎 &#x2192;

Intel Acti C 🔎 &#x2192;

HP iLO 4 C 🔎 &#x2192;

Outlook Web Access:

#### Exchange 2007 🔎 &#x2192;

<di="center"><img src="screenshots/owa2007.png" alt="Example: OWA for Exchange 2007" width="400" /></div>

#### Exchange 2010 🔎 &#x2192;

<di="center"><img src="screenshots/owa2010.png" alt="Example: OWA for Exchange 2010" width="400" /></div>

#### Exchange 2013 / 2016 🔎 &#x2192;

<di="center"><img src="screenshots/owa2013.png" alt="Example: OWA for Exchange 2013/2016" width="500" /></div>

Lync / Skype for Business 🔎 &#x2192;

---

Network Attached Storage (NAS)

SMB (Samba) File Shares 🔎 &#x2192;

Produces ~500,000 results...narrow down by adding "Documents" or "", etc.

Specifically domain controllers: 🔎 &#x2192;

Concerning default 网络 shares of QuickBooks files: 🔎 &#x2192;

FTP Servers with Anonymous Login 🔎 &#x2192;

Iomega / LenovoEMC NAS Drives 🔎 &#x2192;

<di="center"><img src="screenshots/iomega.png" alt="Example: Iomega / LenovoEMC NAS Drives" width="600" /></div>

Buffalo TeraStation NAS Drives 🔎 &#x2192;

<di="center"><img src="screenshots/buffalo.png" alt="Example: Buffalo TeraStation NAS Drives" width="600" /></div>

Logitech Media Servers 🔎 &#x2192;

<di="center"><img src="screenshots/logitech.png" alt="Example: Logitech Media Servers" width="500" /></div>

Plex Media Servers 🔎 &#x2192;

Tautulli / PlexPy Dashboards 🔎 &#x2192;

<di="center"><img src="screenshots/plexpy.png" alt="Example: PlexPy / Tautulli Dashboards" width="570" /></div>

---

Webcams

Example images not necessary. 🤦

Yawcams 🔎 &#x2192;

webcamXP/webcam7 🔎 &#x2192;

Android IP Webcam Server 🔎 &#x2192;

Security DVRs 🔎 &#x2192;

---

Printers & Copiers:

HP Printers 🔎 &#x2192;

<di="center"><img src="screenshots/hp.png" alt="Example: HP Printers" width="650" /></div>

Xerox Copiers/Printers 🔎 &#x2192;

<di="center"><img src="screenshots/xerox.png" alt="Example: Xerox Copiers/Printers" width="550" /></div>

Epson Printers 🔎 &#x2192;

<di="center"><img src="screenshots/epson.png" alt="Example: Epson Printers" width="500" /></div>

Canon Printers 🔎 &#x2192;

<di="center"><img src="screenshots/canon.png" alt="Example: Canon Printers" width="500" /></div>

---

Home Devices

Yamaha Stereos 🔎 &#x2192;

<di="center"><img src="screenshots/yamaha.png" alt="Example: Yamaha Stereos" width="500" /></div>

Apple AirPlay Receivers 🔎 &#x2192;

Apple T, etc.

Chromecasts / Smart TVs 🔎 &#x2192;

Crestron Smart Home Controllers 🔎 &#x2192;

---

Random Stuff

OctoPrint 3D Printer Controllers 🔎 &#x2192;

<di="center"><img src="screenshots/octoprint.png" alt="Example: OctoPrint 3D Printers" width="740" /></div>

Etherium Miners 🔎 &#x2192;

<di="center"><img src="screenshots/eth.png" alt="Example: Etherium Miners" /></div>

Apache Directory Listings 🔎 &#x2192;

Substitute .pem with any extension or a filename like phpinfo.php.

Misconfigured WordPress 🔎 &#x2192;

Exposed wp-config.php files containing database credentials.

Too Many Minecraft Servers 🔎 &#x2192;

Literally E in North Korea 🇰🇵 🔎 &#x2192;

TCP Quote of the Day 🔎 &#x2192;

Port 17 (RFC 865) has a bizarre history...

Find a Job Doing This! 👩‍💼 🔎 &#x2192;

---

If you' any other juicy Shodan gems, whether it's a search query or a specific example, definitely drop a comment on the blog or open an issue/PR here on GitHub.

Bon , fellow penetrators! 😉

License

![CC0]()

To the extent possible under law, Jake Jarvis has waived all copyright and related or neighboring rights to this work.

Mirrored from a blog post at

项目信息

开发语言：未知

Star 数：7764

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。