Building a Shodan-Based Asset Discovery and ThinkPHP Log Exposure Scanner
Enviroment Setup
Install the official Shodan libray via pip:
pip install shodan
Initialize your API credentials:
shodan init <your_api_key>
Verify connectivity by testing a query count:
shodan count nginx
Basic Host Discovery
The following script demonstrates fundamental interaction with the Shodan API to retrieve web server assets:
im ...
Posted on Tue, 25 Aug 2026 16:35:30 +0000 by midi_mick
Comprehensive Penetration Testing Reconnaissance and Asset Discovery Reference
Network Reconnaissance & IP Mapping
Initial network mapping focuses on identifying live hosts, autonomous system boundaries, and infrastructure footprints. Leverage ASN databases to trace IP ownership and utilize certificate transparency logs for historical asset discovery. Favicon hashing can also correlate unknown IPs to known frameworks ...
Posted on Thu, 18 Jun 2026 18:08:43 +0000 by stbalaji2u