tags: shodan shodan_web_server reconnaissance
Shodan Search Filters for Information Gathering ▪ Use the following filter to identify the IIS servers with SSL certificates issued to “Company Inc.”: Ssl:“Company Inc.” http.title:“IIS” ▪ Use the following filter to locate IIS servers with SSL certificates where the common name (CN) is “company.in”: Ssl.cert.subject.CN:“company.in” http.title:“IIS” ▪ Use the following filter to find IIS servers in the US: http.title:“IIS Windows Server” country:“US” ▪ Use the following filter to locate IIS7 servers running on port 80: http.title:“IIS7” port:80