Root777 » Web Security http://www.root777.com Computer Security & Technology Tue, 27 Jul 2010 02:25:48 +0000 en hourly 1 http://wordpress.org/?v=3.0 http://www.root777.com http://www.root777.com/favicon.ico Root777 Using SHODAN to find insecure Servers, Routers and gain ROOT access http://www.root777.com/web-security/using-shodan-to-find-insecure-servers-routers-and-gain-root-access/ http://www.root777.com/web-security/using-shodan-to-find-insecure-servers-routers-and-gain-root-access/#comments Wed, 25 Nov 2009 01:37:01 +0000 Ajit Gaddam http://www.root777.com/?p=164

SHODAN lets you find servers/ routers/ etc. by using the simple search bar up above. Most of the data in the index covers web servers at the moment, but there is some data on FTP, Telnet and SSH services as well.
Lets say you want to find servers running the ‘Apache’ web daemon. A simple attempt would be to use:
apache
How about finding only apache servers running version 2.2.3?
apache 2.2.3
You can also narrow down the results using the following search parameters:
country:2-letter country code
hostname:full or partial host name
net:IP range using CIDR notation (ex: 18.7.7.0/24 )
port:21, 22, 23 or 80
For example: get all web (port:80) hosts running ‘apache’ in switzerland (country:CH) that also have ‘.ch’ in any of their domain names:
apache country:CH port:80 hostname:.ch

SHODAN lets you find servers/ routers/ etc. by using the simple search bar up above. Most of the data in the index covers web servers at the moment, but there is some data on FTP, Telnet and SSH services as well. SHODAN is the brainchild of John Matherly aka @achillean

Lets say you want to find servers running the ‘Apache’ web daemon. A simple attempt would be to use:

apache

You can also narrow down the results using the following search parameters:

country:2-letter country code

hostname:full or partial host name

net:IP range using CIDR notation (ex: 18.7.7.0/24 )

port:21, 22, 23 or 80

How about something really bad. Hopefully, the webmasters below are taking steps to upgrade from IIS 4

Get all web (port:80) hosts running ‘IIS 4.0′ in United States (country:US)

IIS 4.0 country:US port:80

Gain root shell access exploiting built in shell (ash)

The query below is not confirmed but shows the power of SHODAN. Thanks to HDMoore

http://shodan.surtri.com/?q=port:23+”list+of+built-in+commands”


]]> http://www.root777.com/web-security/using-shodan-to-find-insecure-servers-routers-and-gain-root-access/feed/ 2 How to Break Web Software http://www.root777.com/security-video/how-to-break-web-software/ http://www.root777.com/security-video/how-to-break-web-software/#comments Sun, 07 Sep 2008 14:24:54 +0000 Ajit Gaddam http://www.root777.com/?p=32

Mike Andrews was one of the coolest and most knowledgeable professors I had the opportunity of learning from, while at school @ Florida Tech.

Currently, Mike is currently working as the Principle consultant at Foundstone/McAfee, taking a break from teaching.

At school, we did not have video tape lectures, but I did find this video of Mike talking at Google on how to break web software, how web applications are attacked and walks through a testing framework for evaluating the security of an application and takes some deep-dives into a few interesting and common vulnerabilities and how they can be exploited.

[googlevideo]5159636580663884360[/googlevideo]

]]> http://www.root777.com/security-video/how-to-break-web-software/feed/ 0