Analyzing Public Infrastructurewith Shodan
Safety Search
© Lead Image © Maksym Yemelyanov, 123RF.com
Every pen test begins with information gathering. Give yourself a head start with the Shodan search engine and its powerful toolkit.
Before exploiting a target, a pen tester needs to know something about how to get inside. Without this information, the exploiter has a slim chance of compromising the target, even if the target is vulnerable.
Information gathering isn't just important to pen testers; it is also essential for other industries. For instance, police often need to gather information on a network and its vulnerabilities before confirming that someone actually committed a crime.
In recent times, many tools have emerged to enable system administrators to determine whether their infrastructure is well-configured and not exposed to potential attack. One good example is Shodan.
[...]
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
US / Canada
UK / Australia