 Search  Calendar  Gallery |  Auctions  Global  Top |  Members  Stats |
 | Admin |
 Chat (0) new User-Map |  send Password  Register |
|---|
| Forum Overview |
Pages: (1) [1] » |
  |
| List of most effective commands on shodan.io |
| hacxx |   
| |
|---|---|---|
| Group: Administrator Level: Posts: 131 Joined: 7/8/2026 IP-Address: saved  | Shodan is most powerful when you combine **keywords** (software, banners, protocols) with **filters** (`filter:value`). The examples below are appropriate for defensive security, asset inventory, OSINT, and exposure assessment on systems you own or are authorized to assess. Shodan's documentation recommends using search filters in the `filter:value` format and combining multiple filters to narrow results. ([Shodan Developer]) ## Core filters | Filter | Purpose | Example | | ------------------ | ---------------------------- | ---------------------------- | | `port` | Search by port | `port:443` | | `country` | Country code | `country:AU` | | `city` | City | `city:Sydney` | | `org` | Organization | `org:"Example Corp"` | | `hostname` | Hostname | `hostname:example.com` | | `net` | CIDR/network | `net:203.0.113.0/24` | | `asn` | Autonomous System | `asn:AS15169` | | `os` | Operating system | `os:Linux` | | `product` | Service/product | `product:nginx` | | `version` | Product version | `product:Apache version:2.4` | | `ssl` | SSL/TLS information | `ssl:"Let's Encrypt"` | | `http.title` | Web page title | `http.title:"Welcome"` | | `http.status` | HTTP status | `http.status:200` | | `has_ssl` | HTTPS enabled | `has_ssl:true` | | `has_ipv6` | IPv6 available | `has_ipv6:true` | | `has_vuln` | Known vulnerabilities tagged | `has_vuln:true` | | `vuln` | CVE identifier | `vuln:CVE-2024-6387` | | `before` / `after` | Scan dates | `after:2025-01-01` | --- ## Useful combinations ### Find your own web servers ```text org:"Example Corp" port:443 ``` ### Inventory SSH servers ```text org:"Example Corp" port:22 ``` ### Find nginx servers ```text product:nginx ``` ### Find Apache servers ```text product:Apache ``` ### Search by page title ```text http.title:"Login" ``` ### HTTPS hosts only ```text has_ssl:true ``` ### Search by network ```text net:198.51.100.0/24 ``` ### Search by hostname ```text hostname:vpn.example.com ``` ### Systems in Australia ```text country:AU ``` ### Windows servers ```text os:Windows ``` --- ## Advanced search techniques Multiple filters: ```text product:nginx country:AU port:443 ``` Quoted strings: ```text org:"Example Corporation" ``` OR search: ```text product:Apache,nginx ``` Numeric ranges: ```text port:>1024,<6000 ``` Negation: ```text -product:Apache ``` These query features (quoted values, comma-separated OR values, numeric ranges, and combined filters) are supported by Shodan's search syntax. ([Shodan Books]) ## High-value filters to learn * `port` * `product` * `version` * `os` * `country` * `city` * `org` * `hostname` * `net` * `asn` * `ssl` * `http.title` * `http.status` * `vuln` * `has_vuln` * `tag` * `isp` These are among the commonly available search filters exposed by Shodan's API. ([Shodan Developer]) ## Tips * Start broad (`product:nginx`), then narrow with filters like `country:AU` or `org:"Your Company"`. * Use quotes for values containing spaces: ```text org:"Example Corporation" ``` * Combine several filters to quickly inventory your organization's internet-facing assets. * Use `has_vuln:true` or specific `vuln:CVE-...` queries to identify assets that Shodan has associated with known vulnerabilities, then verify and remediate them on systems you own or manage.
| |
| 7/27/2026 3:42:29 PM |    | |
|
| Thread-Info | |
|---|---|
| Access | Moderators |
| Reading: all Writing: all Group: general | none |
| Forum Overview |
.: Script-Time: 0.031 || SQL-Queries: 7 || Active-Users: 6,269 :.
Powered by ASP-FastBoard HE v0.8, hosted by cyberlord.at