Censys
In an earlier article, we looked at the Shodan search engine. Today is another similar search engine, as said must have.
Get acquainted:
Censys is a search engine that searches for connected devices to the network and checks them for popular vulnerabilities. The engines of this search engine run around the clock and add millions of diverse devices each month. There were cases when found control systems of nuclear power plants and heating systems and heatings of different objects.
If you look well, you can find a lot of interesting information. This way you can access servers, webcams, printers, routers, smart home systems, etc. This information can cause significant harm.
Write 80 .http.get.headers.www_authenticate: netcam and get a list of about 3,000 web-based network cameras. It is easy to guess that 80 is the open eightieth port, http is the corresponding protocol, get is the data acquisition method, header is the header, and www_authenticate: netcam corresponds to the device 's view as a network camera.
Enter metadata.manufacturer: "Cisco" and see all active hardware released by Cisco and currently running. It is certain that there will be a mass of non-patched routers with known vulnerabilities.
It is also useful to know typical error messages. Dial certificate has expired and get a list of everyone who uses expired certificates. You can also perform a quick audit of a specific subnet range.
Want to know how the internet changed while you celebrated New Year 's Eve? The inquiry * [2018-12-31 TO 2019-01-01] will show all new and updated network knots added to Censys base for this period.
I wonder how many tracking nodes there are in one of Microsoft 's subnets? Set its IP address range to ip: [137.116.81.1 TO 137.117.235.255].
Conveniently, Censys automatically processes DNS records. Type mx: gmail.com and get a list from Google mail servers. DNS A records are also immediately converted to IP addresses.
For example, a: facebook.com will give the host description of the primary server with IP 173.252.120.68.
In general, a very useful tool.
Success in business...