Shodan dhe Censys

Shodan and Censys are search engines that continuously scan the entire IPv4 internet and index the banners returned by open ports.

Unlike Google, which indexes web pages, Shodan indexes metadata about services: what port is open, what software version responds, what HTTP headers are returned, what SSL certificate is presented. You can search for very specific patterns: "Server: Apache/2.4.49" finds every exposed Apache 2.4.49 instance (the one with Path Traversal CVE-2021-41773). country:XK product:"pfSense" finds pfSense firewalls in Kosovo. ssl.cert.subject.cn:"example.com" finds every certificate for a given organization. For OSINT, Shodan is indispensable for mapping the external attack surface of a target: which services are exposed, which run vulnerable versions, which leak sensitive banners, which are actually honeypots. For defenders, Shodan Monitor watches your IP ranges and alerts on changes, including newly exposed services and certificate changes. Censys offers a similar service with a different data pipeline and stronger academic integrations. Ethical note: searching Shodan is passive and legal. Touching the devices you find — trying default credentials, running exploits — is not. Use Shodan for inventory and threat modeling, not as a target list for unauthorized testing. The same caveat applies in reverse: the internet is always watching, and if you expose a service to 0.0.0.0 it will appear in Shodan within hours.

Mjete:

• Shodan — shodan.io + CLI.
• Censys — censys.io.
• ZoomEye, FOFA.

Shembuj query:

# Shodan
shodan search 'country:AL port:22 product:OpenSSH'
shodan host 8.8.8.8
shodan search 'title:"RouterOS" country:XK'  # Kosova

# Censys
censys search 'services.service_name: HTTP and location.country: "Albania"'

1. Gjej 5 pajisje të ekspozuara pa kujdes në Shqipëri ose Kosovë (webcams, routers me panel admin).
2. Raporto një finding tek ISP-ja përkatëse në mënyrë etike.

• Shodan CLI docs.
• Censys Query Syntax.