News for hackers. Stuff that matters.

A comment on Find and analyze any reachable server and device on the internet.

Re:Find and analyze any reachable server and device on the i... by ramblenode on Thursday January 25, 2018 @11:38PM (#16237059)
"Just like people use popular search engines to find relevant content on the Internet, Censys allows users to discover the devices, networks, and infrastructure on the Internet and monitor how it changes over time."

"Censys was created in 2015 at the University of Michigan, by the security researchers who developed ZMap, the most widely used tool for Internet-wide scanning. Over the past five years, the team has performed thousands of Internet-wide scans, consisting of trillions of probes, and has played a central role in the discovery or analysis of some of the most significant Internet-scale vulnerabilities: FREAK, Logjam, DROWN, Heartbleed, and the Mirai botnet."

How does this compare with shodan.io?

[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by willstrafach on Friday January 26, 2018 @12:00PM (#16240723)
Censys seems to be HTTP-focused, along with elements that go with it such as TLS certificates (Not to imply they focus exclusively on HTTP content of course).

Shodan is more generalized and scans many different ports.

[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by strictnein on Thursday January 25, 2018 @11:51PM (#16237108)
Good question.

Also that "discovery or analysis" qualifier is quite the qualifier. Shodan certainly qualifies for all of those vulns as well, with that qualifier.

[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by zitterbewegung on Friday January 26, 2018 @12:48AM (#16237276)
Showdan is more like a search engine . This tool is a service that lets you perform arbitrary queries on the internet from a port. It’s like an indexer or a scraper .
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by scandinavian on Friday January 26, 2018 @03:03AM (#16237649)
No, that's not true. This is exactly the same as shodan.

It's just a frontend for their public datasets: https://censys.io/data

[ Parent | on HN ]