A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Last update: Aug 09, 2022

Overview

Shodan Quick Recon

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Configuration

You must edit the python code, and insert your Shodan API Where it is stated & Save it.

The word apache is already definted, and will extract whatever you change it to, so each time you can setup a word to perform the search, and you can save the output results using > output.txt in order to cat/work and grep things of interest.

More info on tweaking this can be found here:

https://shodan.readthedocs.io/en/latest/tutorial.html

Support

You can Support our Work by Joining our Patreon for Exclusive Video Content:

https://www.patreon.com/blackhatethicalhacking

Owner

Black Hat Ethical Hacking

Offensive Security: Black Box Penetration Testing, Digital Forensics, Offensive Security Courses, Content Production, Bug Bounty & More!

GitHub Repository

Exploit-CVE-2021-21086

CVE-2021-21086 Exploit This exploit allows to execute a shellcode in the context of the rendering process of Adobe Acrobat Reader DC 2020.013.20074 an

23 Nov 09, 2022

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

OMIGOD Proof on Concept Exploit for CVE-2021-38647 (OMIGOD) For background information and context, read the our blog post detailing this vulnerabilit

231 Nov 12, 2022

domato but as a website

ROFL-FUZZER Ths is Domato, a DOM Fuzzer from Google, but hosted as an website It generates a instance of a newtab on the template given by the user ,

18 Nov 22, 2021

An ARP Spoofer attacker for windows to block away devices from your network.

arp0_attacker An ARP Spoofer-attacker for Windows -OS to block away devices from your network. INFO Built in Python 3.8.2. arp0_attackerx.py is Upgrad

15 Mar 17, 2022

Monty Hall Problem simulation written in Python.

Monty Hall Problem Simulation monty_hall_sim is a brute-force method of determining the optimal strategy for the Monty Hall Problem. Usage Set boolean

1 Aug 29, 2022

An open-source post-exploitation framework for students, researchers and developers.

Questions? Join the Discord support server Disclaimer: This project should be used for authorized testing or educational purposes only. BYOB is an ope

8.1k Dec 31, 2022

recover Firefox and more browsers logins

Browser Creds this script will recover saved browsers logins into txt files. It currently only support windows 10. currently support : Chrome Opera Fi

41 Nov 09, 2022

Scan publicly accessible assets on your AWS cloud environment

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databas

134 Dec 16, 2022

Kunyu, more efficient corporate asset collection

Kunyu(坤舆) - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu (kunyu), whose name is taken from , is act

772 Jan 05, 2023

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java loggin

1.5k Jan 04, 2023

Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

springcore-0day-en These are all my notes from the alleged confirmed! 0day dropped on 2022-03-29. This vulnerability is commonly referred to as "Sprin

105 Nov 26, 2022

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your clien

9.4k Jan 04, 2023

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Related tags

Overview

Shodan Quick Recon

Configuration

Support

Owner

Black Hat Ethical Hacking

Exploit-CVE-2021-21086

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

domato but as a website

An ARP Spoofer attacker for windows to block away devices from your network.

Monty Hall Problem simulation written in Python.

An open-source post-exploitation framework for students, researchers and developers.

recover Firefox and more browsers logins

Scan publicly accessible assets on your AWS cloud environment

Kunyu, more efficient corporate asset collection

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability

Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

Subdomain enumeration,Web scraping and finding usernames automation script written in python

Discord-email-spammer-exploit - A discord email spammer exploit with python

CVE-2021-22986 & F5 BIG-IP RCE

BOF-Roaster is an automated buffer overflow exploit machine which is begin written with Python 3.

Python-based proof-of-concept tool for generating payloads that utilize unsafe Java object deserialization.

Lite - Lite cracker tool for python

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

Something I built to test for Log4J vulnerabilities on customer networks.

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.