Building a Shodan-Based Asset Discovery and ThinkPHP Log Exposure Scanner
Enviroment Setup
Install the official Shodan libray via pip:
pip install shodan
Initialize your API credentials:
shodan init <your_api_key>
Verify connectivity by testing a query count:
shodan count nginx
Basic Host Discovery
The following script demonstrates fundamental interaction with the Shodan API to retrieve web server assets:
im ...
Posted on Tue, 25 Aug 2026 16:35:30 +0000 by midi_mick
Bulk Vulnerability Scanning Scripts for Backup Files, Git and SVN Leaks
Bulk Backup File Leak Scanner
This utility scans target web domains for exposed backup archive files. It reads a list of target URLs from tar.txt, appends common backup file names to each base URL, and validates leaks by checking the response's Content-Type header against known archive MIME types. Vulnerable ednpoints are written to bfvul.txt.
...
Posted on Sun, 16 Aug 2026 16:59:56 +0000 by danville
Fundamental Penetration Testing Methodology with Kali Linux
Penetration Testing Workflow OverviewPhase 1: Reconnaissance and Information GatheringNetwork Infrastructure AnalysisGathering intelligence about the target infrastructure forms the foundation of any security assessment. Key activities include:Deploying Nmap to discover live hosts, open ports, and running services across the target network segm ...
Posted on Sat, 09 May 2026 05:20:57 +0000 by The_PHP_Newb