Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/javierolmedo/shodan-filters

A list of shodan filters
https://github.com/javierolmedo/shodan-filters

Last synced: 3 months ago
JSON representation

A list of shodan filters

Awesome Lists containing this project

README

        





Compilation of SHODAN Filters



🔗 Javier Olmedo
 | 
HACKPUNTES 🌐


# List of Shodan Filters
## General Filters
| **Name** | **Description** | **Type** |
| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| **after** | Only show results after the given date (dd/mm/yyyy) string | string |
| **asn** | Autonomous system number string | string |
| **before** | Only show results before the given date (dd/mm/yyyy) string | string |
| **category** | Available categories: ics, malware string | string |
| **city** | Name of the city string | string |
| **country** | 2-letter country code string | string |
| **geo** | Accepts between 2 and 4 parameters. If 2 parameters: latitude,longitude. If 3 parameters: latitude,longitude,range. If 4 parameters: top left latitude, top left longitude, bottom right latitude, bottom right longitude. | string |
| **hash** | Hash of the data property integer | integer |
| **has_ipv6** | True/ False boolean | boolean |
| **has_screenshot** | True/ False boolean | boolean |
| **hostname** | Full hostname for the device string | string |
| **ip** | Alias for net filter string | string |
| **isp** | ISP managing the netblock string | string |
| **net** | Network range in CIDR notation (ex. 199.4.1.0/24) string | string |
| **org** | Organization assigned the netblock string | string |
| **os** | Operating system string | string |
| **port** | Port number for the service integer | string |
| **postal** | Postal code (US-only) string | string |
| **product** | Name of the software/ product providing the banner string | string |
| **region** | Name of the region/ state string | string |
| **state** | Alias for region string | string |
| **version** | Version for the product string | string |
| **vuln** | CVE ID for a vulnerability string | string |
## HTTP Filters
| **Name** | **Description** | **Type** |
| --------------------------- | ------------------------------------------------ | -------- |
| **http.component** | Name of web technology used on the website | string |
| **http.component_category** | Category of web components used on the website | string |
| **http.html** | HTML of web banners | string |
| **http.html_hash** | Hash of the website HTML | integer |
| **http.status** | Response status code | integer |
| **http.title** | Title for the web banners website | string |

## NTP Filters
| **Name** | **Description** | **Type** |
| ---------------- | ---------------------------------------------------------------------------- | -------- |
| **ntp.ip** | IP addresses returned by monlist | string |
| **ntp.ip_count** | Number of IPs returned by initial monlist | integer |
| **ntp.more** | True/ False; whether there are more IP addresses to be gathered from monlist | boolean |
| **ntp.port** | Port used by IP addresses in monlist | integer |

## SSL Filters
| **Name** | **Description** | **Type** |
| ------------------------ | ----------------------------------------------------- | ---------------- |
| **has_ssl** | True / False | boolean |
| **ssl** | Search all SSL data | string |
| **ssl.alpn** | Application layer protocols such as HTTP/2 ("h2") | string |
| **ssl.chain_count** | Number of certificates in the chain | integer |
| **ssl.version** | Possible values: SSLv2, SSLv3, TLSv1,TLSv1.1, TLSv1.2 | string |
| **ssl.cert.alg** | Certificate algorithm | string |
| **ssl.cert.expired** | True / False | boolean |
| **ssl.cert.extension** | vNames of extensions in the certificate | string |
| **ssl.cert.serial** | Serial number as an integer or hexadecimal string | integer / string |
| **ssl.cert.pubkey.bits** | Number of bits in the public key | integer |
| **ssl.cert.pubkey.type** | Public key type | string |
| **ssl.cipher.version** | SSL version of the preferred cipher | string |
| **ssl.cipher.bits** | Number of bits in the preferred cipher | integer |
| **ssl.cipher.name** | Name of the preferred cipher | string |

## Telnet Filters
| **Name** | **Description** | **Type** |
| ----------------- | ----------------------------------------------------------- | -------- |
| **telnet.option** | Search all the options | string |
| **telnet.do** | The server requests the client do support these options | string |
| **telnet.dont** | The server requests the client to not support these options | string |
| **telnet.will** | The server supports these options | string |
| **telnet.wont** | The server doesnt support these options | string |