The Amazing Shodan

SAVE THIS TWEET: Trust me, you'll need it more than once on your Bug Bounty journey

feeling bored of hunting?

another duplicate? Another N/A?

or maybe you just opened your laptop and have no idea where to start?

Remember, SHODAN is always your friend

open Shodan and try something different

this time

1

Pick up all your fav domains that you're interested to do bug bounty on it, and then search for all of it in 1 dork

Ex:

you can include as many domains as you want

-_-

Ssl.cert.subject.CN:"dell.com,att.com,indeed.com,tesla.com,yahoo.com" 200

-_-

2

Pick up all your fav SSL's that you're interested to do bug bounty on it, and then search for all of it in 1 dork

Ex: and for sure you can add as many as you want

-_-

ssl:"AT&T Services Inc.,AT and T Services,Deere and Company,Dell Technologies Inc.,Red Bull GmbH" 200

-_-

and they explore IPs, forgotten services, exposed ports, old infrastructure, and those weird servers nobody seems to care about

More Ex:

ASN's

-_-

asn:AS00001,AS00002,AS00003

-_-

Favicon hash

-_-

http.favicon.hash:1523284537,-1273708261,87212129,-391226184

-_-

Http Title

-_-

http.title:"Grafana,JFROG,AT&T, FB Login" 200

-_-

and for sure you can do it on shodan cli with these commands ==>

sudo shodan download --limit 1000 domains.json.gz 'Ssl.cert.subject.CN:"paypalcorp.com,paypal.com,paypal-corp.com"



sudo shodan parse --fields ip_str,port --separator " " domains.json.gz | awk '{print$1":"$2}' | httpx

why you should save this tweet and keep using it every day?

Shodan is constantly scanning and updating its data.

so every hour there's something new

Happy Hunting, Mate's ♥

#BugBounty #Shodan #Recon #CyberSecurity #Bugbountytips #Bugbountytip