Hack Like a Pro: How to Find Any Router's Web Interface Using Shodan « Null Byte :: WonderHowTo

Welcome back, my hacker noviates!In a recent post, I introduced you toShodan, the world's most dangerous search engine. Shodan crawls the globe from IP to IP address, attempting to pull the banners of each web-enabled device and server it finds.These banners are what the web servers and devices "advertise" to the world as to who they are. By searching these web banners, we can find the log-in interface for nearly every web-enabled device on planet earth.Shodan Doesn't Index Content, It Indexes BannersIt's important to note that unlike Google, Bing, Yahoo, and other search engines, Shodan does not index thecontentof a website, rather it indexes the information in the banner. These banners will tell us whether the device is a webcam, a router, a VOIP phone system, or whatever, along with something about the underlying technology.To do a specific search in Shodan, you need to understand what is in these banners and how we can use it to search for a specific and vulnerable site.The Search Tools Are a Lot Like Other Search EnginesThe search syntax for Shodan is very similar to the searching on other search engines, but what you are searching for isverydifferent. Shodan accepts the same standard Boolean operators as the others (+-|) and quotation marks can be used to narrow a search to only the exact content between the quotation marks.Shodan also accepts some basic filters that allows you to narrow down your search results. These include the following.after/before- limits our results to banners that have been indexed before or after a specific datecountry- filters our results by country using the two-letter country codehostname- filters results by domain namenet- filters results by IP address range using CIDR notationgeo- filters by longitude and latitudeos- filters results by host operating systemport- filters results by portNow that we have the basics of Shodan searching and filtering, let's see what we can find.Step 1: Log in to ShodanFirst, let's log in to Shodan. Although you can use Shodan without logging in, some of the filters we will use here require us to login to enable them. Navigate toshodanhq.comand log in.Step 2: Search for Cisco RoutersOnce logged in, let's do a search for Cisco banners. These would be the banners on Cisco devices (the most widely used routers and switches in the world) that have a Internet-enabled administration panel. When we do, Shodan finds over 3 million devices! It breaks it down by country on the left side panel as you can see below.Step 3: Filter by CountrySo, now we have all the Cisco devices indexed by Shodan. The 3+ million devices is a pretty unwieldy amount to work with, so let's try to target our search by country. In this case, let's find all the Cisco devices in India.To do so, we will need the two-letter country code of India, which isIN. The syntax then finding all the Cisco routers in India is below. Note the colon (:) between the keyword country and the two-letter country code.cisco country:INWhen we do so, we narrow our search considerably. As you can see in the screenshot below, we are now down to 71,147 routers. Still an unwieldy amount, but considerably smaller.Step 4: Filter by PortLet's continue to narrow our search and try to become very specific for what we are seeking. Let's imagine that we are looking for Cisco routers that enable VOIP in India. We know that VOIP uses the SIP protocol and the SIP protocol uses port 5060, so let's find all the Cisco routers in India that use VOIP. We can type in the search window:cisco country:IN port:5060As you can see below, we have now narrowed our results down dramatically to just 2,435 routers.Step 5: Narrow the Results by IP AddressFinally, let's narrow our search down a even further. Let's add one more condition, an IP address range. Let's look for Cisco routers in India that use port 5060 (VOIP) on the IP address range of 125.63.65.0/24.cisco country:IN port:5060 net:125.63.65.0/24As you can see, we have narrowed our search of Cisco routers from 3 million to a single router in India with port 5060 open!Step 6: Open the ResultsFinally, let's click on the info for that router. As you can see below, Shodan provide us a significant amount of info on this single router.To be able to access these devices, you would be well-advised to first look up the admin username and password as many admins are too lazy or reckless to change them. If you look through this banner carefully, there is an indication that there is at least a single user named "root". With that info, it becomes a password cracking exercise.In my next Shodan post, we will examine further ways to find vulnerable sites, so keep coming back!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseMap image via Shodan,Crosshairsvia ShutterstockRelatedHack Like a Pro:How to Find Vulnerable Targets Using Shodan—The World's Most Dangerous Search EngineNews:Hacking SCADAThe Hacks of Mr. Robot:How to Use the Shodan API with Python to Automate Scans for Vulnerable DevicesHow To:Find Vulnerable Webcams Across the Globe Using ShodanHack Like a Pro:How to Crack Online Passwords with Tamper Data & THC HydraHow To:Hack WiFi Using a WPS Pixie Dust AttackHow To:Hack Together a YouTube Playing Botnet Using ChromecastsHow To:Seize Control of a Router with RouterSploitHacker Fundamentals:The Everyman's Guide to How Network Packets Are Routed Across the WebNews:How to Study for the White Hat Hacker Associate Certification (CWA)How To:Set Up an SSH Server with Tor to Hide It from Shodan & HackersHow To:Recover a Lost WiFi Password from Any DeviceHack Like a Pro:How to Hack Web Apps, Part 2 (Website Spidering with WebScarab)Hack Like a Pro:How to Hack Web Apps, Part 1 (Getting Started)How To:Locate & Exploit Devices Vulnerable to the Libssh Security FlawHow To:Share Your Windows 8 PC's Internet with a Phone or Tablet by Turning It into a Wi-Fi HotspotNews:Secure Your Wireless Network from Pillage and Plunder in 8 Easy StepsNews:What does Pro Tools HD Native mean for you?How To:Hack Wireless Router Passwords & Networks Using HydraHow To:Get Free Wi-Fi from Hotels & MoreNews:Finding the Exploits Out in the World (For Beginner Hackers)How To:Hack Wi-Fi Using Wifite in KaliHow To:The Official Google+ Insider's Guide IndexNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Four: The Invisible InternetHow To:Use I2P to Host and Share Your Secret Goods on the Dark Web—Anonymously