MurMurHash

MurMurHash This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform. What is MurMurHash? MurmurHash is a non-cryptographic hash function suitable for general hash-based lookup. The name comes from two basic operations, multiply MU and rotat...

reconpal

ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might ...

CVE-2017-8225

CVE-2017-8225 Install Python3 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: cd CVE-2017-8225 python3 scanip.py Your File Text .txt Example: python3...

F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-IP CVE-2020-5902 checker using Shodan CLI Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I...

ShodanFortiOS

This repository does not have a README...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

R4venzCl4w

R4venzCl4w ◣◢ノ-=≡≡卍 A modular Framework for Pentesters and Bug Hunters written in Python3. Table of Contents R4venzCl4w ◣◢ノ-=≡≡卍 Technologies & Tools Requirements Features Features Implementation Installation Config Usage Options Example Todo Contributing License 🔧 Technologies & Tools 📚...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

C2-Tracker

C2 Tracker C2 Tracker is a free-to-use-community-driven IOC feed that uses Shodan andCensys searches to collect IP addresses of known malware/botnet/C2 infrastructure. This Project has been Archived This project has been archived. The text files in data/ have been removed and are no longer update...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation python -m venv venv source venv/bin/activate pip install -r requirements.txt...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine. Just need to ent...

cve-2024-21762-checker

FortiGate cve-2024-21762-checker This script is used to check for vulnerabilities in Fortigate SSL VPNs based on CVE-2024-21762. It uses Shodan to find vulnerable devices and test their vulnerability. Features Uses Shodan API to find Fortigate devices running SSL VPN on port 10443. Checks the...

cve-2024-6387_hassh

CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...

InfraHunter

InfraHunter Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data. Requirements Shodan API Key URLScan API Key python3 -m pip install -r requirements.txt Usage Examples python3 .\hunter.py -q "http.html:'titan stealer'" -s Shodan API Key -u URLScan API Key Builti...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...

CVE-2020-10148-Solarwinds-Orion

CVE-2020-10148 Solarwinds Orion Download CVE-2020-10148.py wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Looking Solarwinds Orion from Shodan...

CVE-2021-22893

CVE-2021-22893 Pulse Connect Secure RCE Vulnerability CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...

CVE-2023-27350

CVE-2023-27350 Python 2.7 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Reff : https://nvd.nist.gov/vuln/detail/CVE-2023-27350 Shodan Dork http.html:"papercut" http.html:"papercut" port:9191 http.title:"PaperCut Login"...