Specialized Search Engines
Search engines for exposed devices and services (Shodan and similar).
Shodan#
A search engine for Internet-connected devices.
Examples of what you can find: servers, routers, webcams, IoT devices.
Use cases:
- Discover exposed services.
- Check for vulnerable devices.
- Monitor your own assets.
Website: https://www.shodan.io (opens in a new tab)
Censys#
A search engine similar to Shodan but with a different focus.
Focuses on Internet hosts, websites, certificates, and other assets.
Use cases:
- Enumerate domains in use.
- Audit open ports and services.
- Discover rogue or unknown assets.
Website: https://censys.io (opens in a new tab)
VirusTotal#
An online virus-scanning service.
Lets you upload files or URLs to scan with multiple antivirus engines.
Use cases:
- Check if a file or URL is malicious.
- Look up file hashes to see existing scan results.
- Read community comments for extra context.
Website: https://www.virustotal.com (opens in a new tab)
Have I Been Pwned (HIBP)#
A service to check if your email appears in known data breaches.
Use cases:
- Know if your credentials were leaked.
- Take action to change passwords if needed.
Website: https://haveibeenpwned.com (opens in a new tab)
Vulnerabilities and Exploits#
CVE#
CVE stands for Common Vulnerabilities and Exposures.
It is like a dictionary for known vulnerabilities in software and hardware.
- Each vulnerability has a unique ID like CVE-2024-29988.
- This ID is standardized so everyone refers to the same issue using the same name.
- Helps security researchers, vendors, and IT professionals communicate clearly about specific vulnerabilities.
Who maintains CVE?
- The MITRE Corporation.
Where to search for CVEs?
Example:
- CVE-2014-0160 is better known as Heartbleed.
Exploit Database#
A public resource listing known exploit codes for vulnerabilities.
- Used by penetration testers, red teams, and researchers.
- Always requires legal permission to use exploits on systems.
- Contains exploits submitted by different authors.
- Many exploits are verified and tested.
Use cases:
- Find working exploit code for testing.
- Understand how vulnerabilities can be exploited.
Website:
GitHub#
GitHub is a popular platform for sharing and collaborating on code.
- Many security researchers publish proof-of-concept (PoC) and exploit code for CVEs there.
- Useful for studying how vulnerabilities work.
- Always ensure you have permission before testing any exploit code.
Example:
- Searching for Heartbleed on GitHub returns many PoC and analysis repositories.
Technical Documentation#
Linux Manual Pages#
Linux and other Unix-like systems include built-in manual pages (man pages).
These pages offer detailed documentation for:
- Commands
- System calls
- Library functions
- Configuration files
How to use it:
- Open the terminal.
- Type
man <command>to see its manual page.- Example:
text
man ip
- Example:
- Press
qto quit the man page viewer.
Tip:
- You can also find man pages online by searching in your web browser (e.g., search for "man ip").
Microsoft Windows Technical Documentation#
Microsoft has an official documentation website for its products.
It includes:
- Detailed command documentation
- Configuration instructions
- Examples and guides
Example:
- Searching for
ipconfigon the Microsoft Documentation website gives you all details about this command.
Link:
Product Documentation#
Most popular software and tools have their own official documentation.
This is usually the best source for:
- Up-to-date information
- Features and usage instructions
- Configuration details
- Troubleshooting
Examples of well-known official docs:
- Snort Official Documentation (opens in a new tab)
- Apache HTTP Server Documentation (opens in a new tab)
- PHP Documentation (opens in a new tab)
- Node.js Documentation (opens in a new tab)
Why use official docs?
- Accurate and reliable
- Most complete and current information