Building a Shodan-Based Asset Discovery and ThinkPHP Log Exposure Scanner

Enviroment Setup Install the official Shodan libray via pip: pip install shodan Initialize your API credentials: shodan init <your_api_key> Verify connectivity by testing a query count: shodan count nginx Basic Host Discovery The following script demonstrates fundamental interaction with the Shodan API to retrieve web server assets: im ...

Posted on Tue, 25 Aug 2026 16:35:30 +0000 by midi_mick

Bulk Vulnerability Scanning Scripts for Backup Files, Git and SVN Leaks

Bulk Backup File Leak Scanner This utility scans target web domains for exposed backup archive files. It reads a list of target URLs from tar.txt, appends common backup file names to each base URL, and validates leaks by checking the response's Content-Type header against known archive MIME types. Vulnerable ednpoints are written to bfvul.txt. ...

Posted on Sun, 16 Aug 2026 16:59:56 +0000 by danville

Fundamental Penetration Testing Methodology with Kali Linux

Penetration Testing Workflow OverviewPhase 1: Reconnaissance and Information GatheringNetwork Infrastructure AnalysisGathering intelligence about the target infrastructure forms the foundation of any security assessment. Key activities include:Deploying Nmap to discover live hosts, open ports, and running services across the target network segm ...

Posted on Sat, 09 May 2026 05:20:57 +0000 by The_PHP_Newb