FOFA Proを使ã£ã¦è¦‹ãŸ - hi_kitty’s diary
今回ã¯fofa proã¨ã„ã†ã‚µãƒ¼ãƒ“スã®æ¤œç´¢ã®ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ä¸€è¦§ã¨å®Ÿéš›ã«ã¿ã‚“ãªå¤§å¥½ãwebカメラ(主ã«ç›£è¦–カメラ)ã®æ˜ åƒãŒå…¬é–‹ã•ã‚Œã¦ã„るサイトを見ã¤ã‘ã ã—ã¾ã™ã€‚ ã“ã‚Œã¯OSINTã¨ã„ã†ã‚»ã‚ュリティã®åˆ†é‡Žã§ã™ã€‚OSINTã¯ä»–ã®ã‚»ã‚ュリティã®åˆ†é‡Žã¨ã¯é•ã„ã»ã¼åˆæ³•çš„ã«è¡Œã†ã“ã¨ãŒã§ãã¾ã™ã€‚ fofa proã¨ã¯ 通常ã®googleã‚„yahooãªã©ã®æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã¯80番ãƒãƒ¼ãƒˆã‚„443番ãƒãƒ¼ãƒˆã®webサーãƒãƒ¼ã‚’検索ã™ã‚‹ã®ã«ç‰¹åŒ–ã—ãŸæ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã§ãŒã€fofa proã¯ã»ã¼å…¨ã¦ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ©Ÿå™¨ã‚’検索ã§ãã¾ã™ã€‚ fofa proã¨ä¼¼ãŸæ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³(実際ã«ã¯é•ã†)ã¯ä»–ã«ã‚‚ã‚ã‚Šã¾ã™ã€‚ 有åãªã‚µã‚¤ãƒˆã®URLã‚’å°‘ã—ã ã‘å¼µã£ã¦ãŠãã¾ã™ã€‚解説ã¯ã—ã¾ã›ã‚“ãŒã€ã©ã‚Œã‚‚ä¼¼ãŸã‚ˆã†ãªéƒ¨åˆ†ã¯ã‚ã‚Šã¾ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€é•ã†éƒ¨åˆ†ã‚‚ã‚ã‚Šã¾ã™ã€‚ ・https://fofa.so/ ・https://www.zoomeye.org/ ・https:
我ãŒå®¶ã®ãƒãƒ‹ãƒãŒãŠå®¢æ§˜ã‹ã‚‰ã©ã†è¦‹ãˆã¦ã„ã‚‹ã®ã‹è¦³å¯Ÿã—ã¦ã¿ãŸ - ã“ã‚“ã¨ã‚ーるã—ーã“ã‚“ã¨ã‚ーるã¶ã„
åã©ã‚‚ã¨åŒã˜ã§ã€æ‰‹å¡©ã«ã‹ã‘ã¦è‚²ã¦ãŸè‡ªåˆ†ã®ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆã¯å¯æ„›ã„ã‚‚ã®ã€‚ 「我ãŒå®¶ã®ã‚¢ã‚¤ãƒ‰ãƒ«(ãƒãƒ‹ãƒ)ã¯ã€ ã“ã‚“ãªã«å¯æ„›ã„(主è¦ãƒãƒ¼ãƒˆãŒã‚¬ãƒã‚¬ãƒãª)ã®ã ã‹ã‚‰ã€ ã‚‚ã£ã¨ã‚¹ã‚«ã‚¦ãƒˆ(攻撃)ãŒæ¥ã¦ã‚‚ãˆãˆã‚„ã‚ï¼ã€ ã¨æ€ã„ãŒã¡ã§ã™ãŒã€ãã‚‚ãã‚‚ã€æ”»æ’ƒè€…を始ã‚ã¨ã™ã‚‹å¤–部ã®äººã‹ã‚‰ã€ 我ãŒå®¶ã®ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆã¯ã©ã†è¦‹ãˆã¦ã„ã‚‹ã®ã‹æ°—ã«ãªã‚Šã¾ã—ãŸã€‚ ãã“ã§ã€ã„ãã¤ã‹ã®æ–¹æ³•ã§å®¢è¦³çš„ã«æˆ‘ãŒå®¶ã®ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆãŒå¤–部ã‹ã‚‰ã©ã†è¦‹ãˆã‚‹ã‹ã‚’観察ã—ã¾ã—ãŸã€‚ 1. OSINTã«ã‚ˆã‚‹è¦³å¯Ÿ 1.1. IP Location Finder 1.2. Port Scan 1.3. IP Whois 1.4. SHODAN 1.5. Censys 2. 脆弱性診æ–ツールã«ã‚ˆã‚‹è¦³å¯Ÿ 2.1. サマリ 2.2. [MEDIUM]Terminal Services Doesn't Use Network Level Authentication (NLA)
OSINT 用検索エンジンã‚ã‚Œã“ã‚Œ | ninoseki.github.io
|-------------------------|------------------------------------------------------------------------------------------------------| | asn | The Autonomous System Number that identifies the network the device is on. | | before | Only show results that were collected before the given date (dd/mm/yyyy. | | city | Show results that are located in the given city. | | country | Show results that are loca
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Censys ARC Advisories | Critical Cybersecurity Vulnerabilities
Leading Managed Detection and Response | Trustwave
GitHub - shaanen/osint-combiner: Combining OSINT sources in Elastic Stack
GitHub - censys/censys-command-line: Command-line tool for Censys! Quickly investigate suspicious hosts or answer complex questions about your infrastructure using Censys right from the command-line!
GitHub - abadojack/gocensys: Go library for interacting with Censys
IT Infrastructure Reconnaissance – Part 2 (Shodan, Censys, ZoomEye) - research.securitum.com
It's the Little Things (Part 2) Final - Public
Open Source Intelligence Gathering: Techniques, Automation, and Visualization - SpecterOps
Censys.io Guide: Discover SCADA and Phishing Sites
Finding Phishing: Tools and Techniques
Asset Discovery: Doing Reconnaissance the Hard Way
GitHub - christophetd/censys-subdomain-finder: âš¡ Perform subdomain enumeration using the certificate transparency logs from Censys.
{{#tags}}- {{label}}
{{/tags}}