Shodan — The Hacker's Search Engine That Sees Everything

Shodan — Google for Hackers

While Google indexes websites, Shodan indexes every device connected to the internet — cameras, servers, routers, traffic lights, power plants.

What Shodan Finds

• 📹 IP Cameras: 100,000+ unsecured cameras viewable right now
• 🗄️ Databases: MongoDB, Elasticsearch, Redis with no authentication
• 🏭 Industrial Systems: SCADA systems controlling power grids
• 🖨️ Printers: Thousands with open admin panels
• 🏛️ Government Systems: Exposed services in government networks

Basic Shodan Searches

# Find webcams
webcam has_screenshot:true

# Find Indian devices
country:IN port:22

# Find MongoDB without auth
mongodb port:27017 "MongoDB Server Information"

# Find open Elasticsearch
elasticsearch port:9200

# Find VNC without password
vnc "authentication disabled"

Shodan Dorking (Advanced)

# Find vulnerable Apache servers
apache "302" "location: /login" country:IN

# Find exposed Docker APIs
docker port:2375

# Find exposed Kubernetes dashboards
kubernetes "dashboard" port:443

Real-World Discoveries

• 🔴 Nuclear power plant control systems accessible online
• 🔴 Hospital patient data exposed
• 🔴 Traffic light control systems with default passwords
• 🔴 Water treatment plant SCADA systems

⚠️ Accessing found systems without permission is illegal.

🔥 Learn OSINT & reconnaissance at ONLY4YOU →