PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Shodan: The Search Engine For Hackers

bugcrowd.com | blog | #cloud | #attack-surface | #exposure-management | #reconnaissance | #attack-surface-management | #iot | #tools | #asset-discovery | #shodan
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Shodan indexes service banners, ports, and metadata across IPv4 space to reveal exposed systems and configuration risks; teams use it for asset discovery and authorized reconnaissance.
Published
Collected

Related coverage

blog · borghq.io
How to Continuously Map Your External Attack Surface
Asset inventories drift as infrastructure changes; continuous external attack-surface mapping keeps domains, subdomains and addresses current and surfaces assets that nobody ever listed.
blog · netspi.com
Discover the Unknown with ASM Security for Attack Surface Reduction
ASM reduces attack surface by continuously discovering unmanaged assets and exposures like open ports; separating known from unknown assets helps teams shrink exploitable entry points.
blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · wiz.io
Wiz ASM for any environment, any risk, everywhere
Wiz ASM launches automated reconnaissance that continuously discovers all of an organization's subdomains, merging external discovery with internal context to expose shadow assets and unknown risks.
blog · bugbunny.ai
Attack Surface Management Tools: How to Evaluate Discovery, Context, and Validation
How to evaluate attack surface management tools: discovery is table stakes—demand owner enrichment, change detection and exposure-to-validation follow-through, or you drown in assets you cannot triage.
blog · bugbunny.ai
Continuous Attack Surface Management: What to Watch After the Inventory
Continuous attack surface management beyond discovery: watch new services, certificates and exposure changes, enrich owners, and combine exposure with vulnerability and data sensitivity for triage.
Back