A list of Shodan Dorks for Bug Bounty, Web Application Security, and Pentesting
ssl:"example.com" org:"example.com" hostname:"example.com" ssl.cert.issuer.cn:"example.com" ssl.cert.subject.cn:"example.com" ssl.cert.expired:true hostname:".example.com" ssl.cert.subject.commonName:".example.com" http.title:"Index of /" hostname:".example.com" http.title:"Index of /" ssl.cert.subject.cn:"example.com" ftp port:"10000" hostname:".example.com" ftp port:"10000" ssl.cert.subject.cn:"example.com" "Authentication: disabled" port:445 product:"Samba" hostname:".example.com" title:"Login - Adminer" hostname:".example.com" title:"Login - Adminer" ssl.cert.subject.cn:"example.com" http.title:"sign up" ssl.cert.subject.cn:"example.com" http.title:"sign up" ssl:"example.com" http.title:"sign up" hostname:".example.com" "sign up" ssl.cert.subject.cn:"example.com" "sign up" ssl:"example.com" "sign up" hostname:".example.com" http.title:"LogIn" ssl.cert.subject.cn:"example.com" http.title:"LogIn" ssl:"example.com" http.title:"LogIn" hostname:".example.com" "LogIn" ssl.cert.subject.cn:"example.com" "LogIn" ssl:"example.com" "LogIn" hostname:".example.com" http.status:"302" oauth ssl.cert.subject.cn:"example.com" http.status:"302" oauth ssl:"example.com" http.status:"302" oauth hostname:".example.com" http.title:"log in with" ssl.cert.subject.cn:"example.com" http.title:"log in with" ssl:"example.com" http.title:"log in with" hostname:".example.com" "log in with" ssl.cert.subject.cn:"example.com" "log in with" ssl:"example.com" "log in with" hostname:".example.com" http.status:"302" sso ssl.cert.subject.cn:"example.com" http.status:"302" sso ssl:"example.com" http.status:"302" sso hostname:".example.com" http.title:"login sso" ssl.cert.subject.cn:"example.com" http.title:"login sso" ssl:"example.com" http.title:"login sso" hostname:".example.com" "login sso" ssl.cert.subject.cn:"example.com" "login sso" ssl:"example.com" "login sso" hostname:".example.com" title:"401 Authorization Required" hostname:".example.com" http.html:"403 Forbidden" ssl.cert.subject.cn:"example.com" http.html:"403 Forbidden" ssl:"example.com" http.html:"403 Forbidden" hostname:".example.com" http.html:"500 Internal Server Error" ssl.cert.subject.cn:"example.com" http.html:"500 Internal Server Error" ssl:"example.com" http.html:"500 Internal Server Error" hostname:".example.com" "500 Internal Server Error" ssl.cert.subject.cn:"example.com" "500 Internal Server Error" ssl:"example.com" "500 Internal Server Error" hostname:".example.com" ssl.cert.subject.cn:vpn ssl.cert.subject.cn:"example.com" ssl.cert.subject.cn:vpn ssl:"example.com" ssl.cert.subject.cn:vpn hostname:".example.com" title:"citrix gateway" ssl.cert.subject.cn:"example.com" title:"citrix gateway" ssl:"example.com" title:"citrix gateway" hostname:".example.com" http.html:"JFrog" ssl.cert.subject.cn:"example.com" http.html:"JFrog" ssl:"example.com" http.html:"JFrog" hostname:".example.com" "X-Jfrog" ssl.cert.subject.cn:"example.com" "X-Jfrog" ssl:"example.com" "X-Jfrog" hostname:".example.com" http.title:"dashboard" hostname:".example.com" http.title:"dashboard" ssl.cert.subject.cn:"example.com" dashboard ssl.cert.subject.cn:"example.com" http.title:"Openfire Admin Console" hostname:".example.com" http.title:"control panel" hostname:".example.com" http.title:"control panel" ssl.cert.subject.cn:"example.com" control panel ssl.cert.subject.cn:"example.com" http.html:" The wp-config.php creation script uses this file" hostname:".example.com" http.html:" The wp-config.php creation script uses this file" ssl.cert.subject.cn:"example.com" clockwork hostname:".example.com" clockwork ssl.cert.subject.cn:"example.com" "Server: Jetty" ssl.cert.subject.cn:"example.com" "Server: Jetty" ssl:"example.com" "Server: Jetty" hostname:".example.com" X-Amz-Bucket-Region hostname:".example.com" X-Amz-Bucket-Region ssl.cert.subject.cn:"example.com" Cloudfront_AWS_ssl:"development" org:"Amazon.com" ssl.cert.subject.cn:"example.com" "X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Jenkins [Jenkins]" hostname:".example.com" "X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Jenkins [Jenkins]" ssl.cert.subject.cn:"example.com" http.favicon.hash:81586312 200 hostname:".example.com" http.favicon.hash:81586312 200 ssl.cert.subject.cn:"example.com" product:"Kubernetes" port:"10250, 2379" ssl.cert.subject.cn:"example.com" product:"Kubernetes" port:"10250, 2379" ssl:"example.com" product:"Kubernetes" port:"10250, 2379" hostname:".example.com" port:"9100" http.title:"Node Exporter" ssl.cert.subject.cn:"example.com" port:"9100" http.title:"Node Exporter" ssl:"example.com" port:"9100" http.title:"Node Exporter" hostname:".example.com" http.title:"Grafana" ssl.cert.subject.cn:"example.com" http.title:"Grafana" ssl:"example.com" http.title:"Grafana" hostname:".example.com" http.title:"RabbitMQ" ssl.cert.subject.cn:"example.com" http.title:"RabbitMQ" ssl:"example.com" http.title:"RabbitMQ" hostname:".example.com" HTTP/1.1 307 Temporary Redirect "Location: /containers" ssl.cert.subject.cn:"example.com" HTTP/1.1 307 Temporary Redirect "Location: /containers" ssl:"example.com" HTTP/1.1 307 Temporary Redirect "Location: /containers" hostname:".example.com" http.favicon.hash:1278323681 ssl.cert.subject.cn:"example.com" http.favicon.hash:1278323681 ssl:"example.com" http.favicon.hash:1278323681 hostname:".example.com" "MongoDB Server Information" port:27017 "-authentication" hostname:".example.com" "MongoDB Server Information" port:27017 "-authentication" ssl.cert.subject.cn:"example.com" "Set-Cookie: mongo-express=" "200 OK" hostname:".example.com" "Set-Cookie: mongo-express=" "200 OK" ssl.cert.subject.cn:"example.com" all:"mongodb server information" all:"metrics" hostname:".example.com" all:"mongodb server information" all:"metrics" ssl.cert.subject.cn:"example.com" port:"9200" all:"elastic indices" hostname:".example.com" port:"9200" all:"elastic indices" ssl.cert.subject.cn:"example.com" "220" "230 Login successful." port:21 hostname:".example.com" "220" "230 Login successful." port:21 ssl.cert.subject.cn:"example.com" port:"11211" product:"Memcached" hostname:".example.com" port:"11211" product:"Memcached" ssl.cert.subject.cn:"example.com" "port: 53" Recursion: Enabled hostname:".example.com" "port: 53" Recursion: Enabled ssl.cert.subject.cn:"example.com" title:"kibana" hostname:".example.com" title:"kibana" ssl.cert.subject.cn:"example.com" port:9090 http.title:"Prometheus Time Series Collection and Processing Server" ssl.cert.subject.cn:"example.com" port:9090 http.title:"Prometheus Time Series Collection and Processing Server" ssl:"example.com" port:9090 http.title:"Prometheus Time Series Collection and Processing Server" hostname:".example.com" "default password" hostname:".example.com" "default password" ssl.cert.subject.cn:"example.com" title:protected hostname:".example.com" title:protected ssl.cert.subject.cn:"example.com" http.component:Moodle hostname:".example.com" http.component:Moodle ssl.cert.subject.cn:"example.com" http.favicon.hash:116323821 hostname:".example.com" http.favicon.hash:116323821 ssl.cert.subject.cn:"example.com" html:"/login/?next=" title:"Django" hostname:".example.com" html:"/login/?next=" title:"Django" ssl.cert.subject.cn:"example.com" html:"/admin/login/?next=" title:"Django" hostname:".example.com" html:"/admin/login/?next=" title:"Django" ssl.cert.subject.cn:"example.com" title:"system dashboard" html:jira hostname:".example.com" title:"system dashboard" html:jira ssl.cert.subject.cn:"example.com" "system dashboard" html:jira ssl.cert.subject.cn:"example.com" http.component:ruby port:3000 hostname:".example.com" http.component:ruby port:3000 ssl.cert.subject.cn:"example.com" html:"secret_key_base" hostname:".example.com" html:"secret_key_base" ssl.cert.subject.cn:"example.com" "netweaver" hostname:".example.com" "netweaver" ssl.cert.subject.cn:"example.com" port:"2379" product:"etcd" hostname:".example.com" port:"2379" product:"etcd" ssl.cert.subject.cn:"example.com" http.title:"DisallowedHost" hostname:".example.com" http.title:"DisallowedHost" ssl.cert.subject.cn:"example.com" ssl:"example.com" "-AkamaiGHost" "-GHost" "-Cloudflare" "-Cloudfront" hostname:".example.com" "-AkamaiGHost" "-GHost" "-Cloudflare" "-Cloudfront" ssl.cert.issuer.cn:"example.com" "-AkamaiGHost" "-GHost" "-Cloudflare" "-Cloudfront" ssl.cert.subject.cn:"example.com" "-AkamaiGHost" "-GHost" "-Cloudflare" "-Cloudfront" hostname:".example.com" "-AkamaiGHost" "-GHost" "-Cloudflare" "-Cloudfront" "X-Debug-Token-Link" port:443 hostname:".example.com" "X-Debug-Token-Link" port:443 ssl.cert.subject.cn:"example.com" http.title:"shipyard" HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5664 hostname:".example.com" http.title:"shipyard" HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5664 ssl.cert.subject.cn:"example.com" http.title:"TIBCO Jaspersoft:" port:"443" "1970" hostname:".example.com" http.title:"TIBCO Jaspersoft:" port:"443" "1970" ssl.cert.subject.cn:"example.com" "Confluence" hostname:".example.com" "Confluence" ssl.cert.subject.cn:"example.com" http.title:"SonarQube" hostname:".example.com" http.title:"SonarQube" ssl.cert.subject.cn:"example.com" html:"jmx?qry=Hadoop:" hostname:".example.com" html:"jmx?qry=Hadoop:" ssl.cert.subject.cn:"example.com" http.title:"Directory Listing" hostname:".example.com" http.title:"Directory Listing" ssl.cert.subject.cn:"example.com" http.title:"H-SPHERE" hostname:".example.com" http.title:"H-SPHERE" ssl.cert.subject.cn:"example.com" http.title:"Swagger UI - " hostname:".example.com" http.title:"Swagger UI - " ssl.cert.subject.cn:"example.com" Server: Apache-Coyote/1.1 Tomcat-5.5 hostname:".example.com" Server: Apache-Coyote/1.1 Tomcat-5.5 ssl.cert.subject.cn:"example.com" port:2375 product:"Docker" hostname:".example.com" port:2375 product:"Docker" ssl.cert.subject.cn:"example.com" http.title:"phpinfo()" hostname:".example.com" http.title:"phpinfo()" ssl.cert.subject.cn:"example.com" http.title:"ID_VC_Welcome" hostname:".example.com" http.title:"ID_VC_Welcome" ssl.cert.subject.cn:"example.com" "x-powered-by" "jboss" hostname:".example.com" "x-powered-by" "jboss" ssl.cert.subject.cn:"example.com" jboss http.favicon.hash:-656811182 hostname:".example.com" jboss http.favicon.hash:-656811182 ssl.cert.subject.cn:"example.com" http.title:"Welcome to JBoss" hostname:".example.com" http.title:"Welcome to JBoss" ssl.cert.subject.cn:"example.com" port:"8089, 8000" "splunkd" hostname:".example.com" port:"8089, 8000" "splunkd" ssl.cert.subject.cn:"example.com" http.favicon.hash:-316785925 hostname:".example.com" http.favicon.hash:-316785925 ssl.cert.subject.cn:"example.com" title:"splunkd" org:"Amazon.com" hostname:".example.com" title:"splunkd" org:"Amazon.com" ssl.cert.subject.cn:"example.com" http.title:"oracle business intelligence sign in" hostname:".example.com" http.title:"oracle business intelligence sign in" ssl.cert.subject.cn:"example.com" http.title:"Oracle WebLogic Server Administration Console" hostname:".example.com" http.title:"Oracle WebLogic Server Administration Console" ssl.cert.subject.cn:"example.com" http.title:"Apache Status" hostname:".example.com" http.title:"Apache Status" ssl.cert.subject.cn:"example.com"