Shodan新手语法总结

查找位于国内的 Nginx 服务器：

nginx country:"CN"

查找 GWS(Google Web Server) 服务器：

"Server: gws" hostname:"google"

NetSureveillance Web用户名admin密码为空：

Server: uc-httpd 1.0.0 200 OK Country:"CN"

搜缺省密码：

"default password" city:"Hong Kong"
country:CN "default password"

搜索特定版本的操作系统及端口：

os:"linux" net:"72.34.62.0/24"
os:"windows" net:"195.40.91.0/24"
Apache city:"Hong Kong" port:"8080" product:"Apache Tomcat/Coyote JSP engine"
hostname:".polyu.edu.hk" os:"windows"

扫描指定网段内的所有特定数据库服务器：

product:"Mysql" net:"140.117.13.0/24" port:"3306"
port:"1433" net:"78.131.197.0/24"
port:"5432" net:"77.55.149.0/24"
port:"1521" net:"78.143.192.0/12"
port:"1521" city:"Osaka"

搜索特定远程管理终端端口：

os:"windows" port:"3389" net:"107.160.1.0/24"
os:"linux" port:"22" net:"107.160.1.0/24"
os:"linux" port:"23" net:"107.160.1.0/24"
os:"linux" port:"23" net:"87.124.0.0/15"

在某个城市中搜索指定的端口,操作系统及在线网络设备：

city:"Hong Kong" port:"69"
city:"Hong Kong" port:"3389"
city:"Hong Kong" port:"22"
city:"Hong Kong" port:"23"
city:"Hong Kong" port:"3306"
city:"Hong Kong" port:"110"
city:"Hong Kong" os:"windows"
city:"Hong Kong" product:"cisco"
city:"Hong Kong" port:"8080"

搜索各类漏洞摄像头：

netcam net:"187.189.82.0/24"

常见的默认用户名密码

ACTi: admin/123456 or Admin/123456
Axis (traditional): root/pass,
Axis (new): requires password creation during first login
Cisco: No default password, requires creation during first login
Grandstream: admin/admin
IQinVision: root/system
Mobotix: admin/meinsm
Panasonic: admin/12345
Samsung Electronics: root/root or admin/4321
Samsung Techwin (old): admin/1111111
Samsung Techwin (new): admin/4321
Sony: admin/admin
TRENDnet: admin/admin
Toshiba: root/ikwd
Vivotek: root/
WebcamXP: admin/