Shodan Search Engine Tutorial: Finding Exposed IoT Devices & More

Shodan: the world's first search engine for IoT devices helps penetration testers identify infrastructure exposures.

### Mastering Shodan.io: A Beginner's Guide to Cyber Reconnaissance

* 🔎 Introduction to Shodan.io, a search engine for internet-connected devices, useful for penetration testers, CISOs, and security researchers.
* 💻 Demonstrates searching for **google.com** and its IP address (8.8.8.8) to show exposed services (ports 53 and 443).
* 📸 Shows how to search for exposed cameras (`title:camera`) revealing approximately 7,000 nodes in the US, highlighting the risk of exposed devices.
* 🖥️ Explains searching for webcams with screenshots (`webcam has:screenshot:true`), displaying examples of exposed home and office environments.  This emphasizes the importance of securing internet-facing devices.
* 📞 Demonstrates searching for VoIP devices (`device:VoIP`), showcasing the potential exposure of communication systems.
* 🏙️ Shows a search for devices in New York City, revealing specific devices like Polycom and Obi2000, illustrating location-based searches.
* 🗄️ Explains searching for exposed databases (`product:MySQL`), revealing approximately 3 million exposed servers globally, emphasizing the scale of potential vulnerabilities.
* ⚠️ Concludes by demonstrating searches for outdated operating systems (e.g., Windows 2012), default credentials, and compromised devices, stressing the importance of patching and secure configurations.  The presenter mentions a personal anecdote involving a vulnerable printer during a penetration test.

How To Use Shodan? Mastering Shodan.io: A Beginner's Guide to Cyber Recon - InfoSec Pat

InfoSec Pat

Introduction to Shodan and its capabilities

Video introduction and brief overview of Shodan.

Explanation of Shodan as a search engine for IoT devices.

Mention of upcoming Def Con and invitation to viewers.

Call to action for new viewers to like, subscribe, and share.

Overview of Shodan's interface and features (explore, download, pricing, maps, images, monitor).

Using Shodan for security research and penetration testing

Definition of Shodan as a search engine for internet-connected devices.

Explanation of Shodan's use in identifying infrastructure exposures.

Example search for google.com and its results.

Reverse search using IP address 8.8.8.8, identifying Google's DNS services and ports.

Suggestion to search for company's information to check for exposures.

Searching for specific device types and vulnerabilities

Searching for exposed cameras using the query `title:camera`.

Searching for webcams with screenshots using `webcam has:screenshot:true`.

Searching for VoIP communication devices using `device: VoIP`.

Searching for devices in a specific location (New York City).

Advanced Shodan searches and practical applications

Searching for exposed MySQL servers using `product: MySQL`.

Searching for exposed files and directories using `HTTP title:index of /`.

Searching for legacy Windows operating systems (e.g., Windows 2012).

Searching for devices with default credentials.

Example of finding an exposed HP printer during a penetration test.

Summary of the video and invitation for questions and feedback.