Search for Vulnerable Devices Around the World with Shodan [Tutorial]

[@bayesian7404]

Kody, I watch all of your videos. As a former professor and computer trainer I can safely say that you are in the 1% who can explain anything clearly and in an organized fashion. I work in information security, primarily offensive including pentesting. You have saved me endless hours for brushing up on or even starting to learn a new topic. Thank you for all u do.

[@NullByteWHT]

Thanks Bayesian! You're too kind! If you ever have any video ideas just let me know so we can save everyone endless hours.

[@thePrinceOfPurpose]

I'm not really a csec guy, but I started watching your channel about two months ago. Since then I have attended my first hacking convention, made a kali stick, cracked wep, wpa, and I must say I'm addicted! Very fascinating stuff. I will be attending my next convention in September!

[@elnollie]

Which convention? I ask because I'd like to go to one as well but not sure which to go to.

[@MultiPrimeProduction]

how have you started?

[@TheTurtleOfGods]

@@MultiPrimeProduction put kali on that useless pen drive of yours mate ;)

[@thePrinceOfPurpose]

@@TheTurtleOfGods Yep, 100%. I tried creating a dual boot on my windows machine, but honestly just make a kali stick. ****WARNING**** If you are using windows be sure to get your bitlocker encryption key first. KEEP A PHYSICAL COPY OF THE KEY IN YOUR SAFE OR STORE IT SOME WHERE SECURE. IF YOU CHANGE THE BIOS SETTING YOU **WILL** GET LOCKED OUT OF YOUR MACHINE.

[@MultiPrimeProduction]

@@TheTurtleOfGods what?

[@alexionut6]

Where was this channel all my life? I'm so glad i found it. :)

[@ericdary8421]

Yeah!

[@TheRealSkillman]

Another great and informative video. I work in cybersecurity and still love watching these videos as a refresher and seeing people in the comments learning for the first time.

[@TheRealSkillman]

@No Name It relates a lot to it. Most of his videos are designed from the perspective of a Red Team member testing the security of systems. A video like this is great to know how to prevent a device from showing up on Shodan. Several company's I work for use Shodan to verify devices are secure. Not exactly sure how you could even say this isn't cyber security related. Hacking and Cyber Security go hand in hand.

[@theoroost5823]

how do you go about getting educated in cybersecurity?

[@u1f98a]

Kody Blink Counter: 2 0:44, 1:18

[@LockComputer2002]

theLMGN truly breathtaking

[@MrAjmal2010]

😜

[@tradinwarstoriez5641]

That wasn’t a blink

[@Octopixel40]

0:44 wasn't even a blink

[@u1f98a]

@@Octopixel40 Kody Blink Counter: 1

[@enos5192]

Imagine searching webcams and finding in the screen you alone sitting staring at the screen....

[@oneanime5551]

F

[@dimooon3594]

@@oneanime5551 F

[@Gh0st_0723]

Creepypasta material right there

[@Marius-re3xj]

People who cover their cameras: I do not have such weaknesses.

[@melissadailey-hardman3518]

Lmfao 😂😂💀

[@Shattisbaddis]

Shodan is mad old school, it's pretty cool they are still around.

[@alisawari0]

I really appreciate the free knowledge you're sharing, thank you !

[@NullByteWHT]

Your welcome, the best way to support us is by checking out our website, where you can find all of our content including full videos. null-byte.wonderhowto.com

[@theeffectoflogic3]

​@@NullByteWHT I really didn't want to do it to you but the urge is too strong

[@theeffectoflogic3]

@@NullByteWHT you're*

[@threepoint1434]

I enjoy your videos even more when I play programming/hacking music in the background, while sitting in the dark at midnight. Your informational, and entertaining.

[@NullByteWHT]

Thank you!

[@theeffectoflogic3]

you're*

[@Polaf3456]

"Look at you, hacker. A pathetic creature of meat and bone. Panting and sweating as you run through my corridors. How can you challenge a perfect, immortal machine?"

[@Coldsteak]

haha the first thing i though

[@hassanjacobs7506]

What is that from?

[@Darkest_matter]

@@peevan that's where they got the name from. They're remaking the game btw

[@petermarshall1634]

12:35 That's hosted by an Android app called IP Webcam. You need to select a video renderer like "browser" to see the live feed.

[@NullByteWHT]

Yep

[@joaum2009]

This channel is amazing. He doesn't even blink!

[@joaocosta6886]

Good coke

[@DDBAA24]

When shodan comes 'a knockin , ports start poppin... Whats good with some firewall intrusion techniques , and IDS ? thats a two part ? A) getting around a firewall, and B) IDS Intrusion Detection System .. How to use , how to evade ?

[@yousufk1816]

He's like Sheldon 4k version

[@jotes2316]

"I don't need sleep, I need answers!"

[@5entience626]

Welcome to sheldon cooper presents fun with computers!!

[@MoroseMage]

He's gonna have to be more"open"

[@DursunX]

😳 how is it possible VSat doesnt have a login portal for their network device? im amazed... i used to install similar hardware in Australia, ALWAYS protected by default- even thru the NOC (national operations center).

[@KINGABDUL99]

if you pause at 6:09 i want a cursor like you give you focus at your arrow i want it like this. I want a arrow cursor same like you.

[@KINGABDUL99]

lol i already got it

[@KINGABDUL99]

Nevermid i already got it

[@KINGABDUL99]

I already got it lol

[@KINGABDUL99]

its called macos cursor I have it

[@zakirbaig9447]

Hey 11:04, you can just press the green button with an arrow above the details on the right to navigate to that page.

[@juansPach]

Puedo saber cules son todas sus extenciones de navegador? I can know what are all your browser extension?

[@tripsmarketinggroup]

Thanks for the no intro , straight into the subject

[@dafoex]

The IP webcam one with no password until you want to enable night vision is actually an android app. I think it prompts you to set a custom password instead of using a default one.

[@leossequaudzoagamah5183]

Please could you show us a use of maltego in his differents ways?

[@generic36]

Sir make the video on how to configure external wifi adapter on vmware on kali lunix

[@diegocobian8982]

you mention hiding ourselves before doing a search in shodan... I've looked at it, but the info sometimes is confusing do you have or know about a starting point on how to do that? thank you for the video!

[@Nino21370]

Been teaching me since I was 11 🔥

[@nicolascollazo7272]

Using this software made me feel like an insect. 10/10

[@Nerzhina]

Hi Kody & the team at Null Byte great info. Thank U sir.

[@KINGABDUL99]

which cursor do you have sir

[@MalidarBaenor]

This was very fascinating! All of your vids are great!

[@Zooiest]

Imagine finding out that some big company uses default passwords lol

[@Zooiest]

@No Name imagine saying ghey instead of gay in 2019

[@Zooiest]

@Haranobu Ugaki wait he deleted his comment lmao

[@y2ksw1]

They do

[@SaintTrinasTorch]

Dude, I have zero experience hacking but I've worked in multiple warehouses and factories, and can almost guarantee that most of them used very generic passwords to enter their network. Like the place I'm at now. Poor cable management, poor network connections, and it's more open than the legs of my ex girlfriend. If I had working knowledge of pen testing, they would be destroyed. But I'd rather not go to jail, and strive to get out of bullshit work. Lol

[@icyknightmare4592]

Companies? How about strategic missiles? gizmodo.com/for-20-years-the-nuclear-launch-code-at-us-minuteman-si-1473483587

[@dougsam6341]

Shodan can it also help with bug hunt?

[@patrickrodriguez9153]

im not really a hacker, but i started watching your channel about two months ago, since then i have became one. Thank you.

[@kane811060]

So in 2 months you have become a hacker, Ima watch some fighter pilot vids and become a wing commander in just a couple of months. Your a script Kiddie not a hacker Patrick, Have you started cracking accounts yet? Tis where all young N00bs start out combos and configs? give me a shout il give you a kick start!

[@figure8379]

@@kane811060 Lmao !!

[@Raaz-hd2si]

@@kane811060 bro i wanna learn hacking where should I start!

[@deipweedecuchiekrucher7384]

Instead of Bill Nye the science Guy this man is null byte the hacker guy

[@ajaccio06]

me : today i want to hack some NASA files nullbyte : here i am !

[@sinsofyourpast]

so theoretically, you could utilize shodan to find local traffic signs that are connected to the internet, route your traffic through different nsats, and hypothetically change said signs to read "Watch for Dinosaurs" or something?

[@Darkest_matter]

Yes

[@jacobsamuel4092]

if you can have an episode for first timers who want to explore darknet, it would be nice .

[@realitynowassigned]

He really doesn't blink. Once you notice you can't unnotice

[@re43p3raod3]

" a couple different thousand devices " you act like that is nothing lmao love this

[@rozer4660]

Best youtube channel guys keep it up !

[@privateerinvestor2773]

You mention at 4:43 your video on url tracking etc.... do you have a link? Thank you

[@nxtlvlshit1607]

Privateer Investor kzbin.info/www/bejne/fH_Mc4GagpymqKc , I am investing 2 ;)

[@misaalanshori]

That IP Webcam page with no password is an Android app that allows you to use your phone as an webcam

[@fiftyshadesofgrey1991]

And if I need to scan ALL vulnerable devices in my city but making them range by streets and locations

[@digitaldeeds1157]

Error: Insufficient query credits, please upgrade your API plan or wait for the monthly limit to reset

[@aritrosaha1616]

Haranobu Ugaki you want unlimited access to an API for free?

[@richard4629]

@@aritrosaha1616 yes

[@TheZabbiemaster]

I booted it up, now my pc claims to be magnificent and calls me insect all the time.

[@adityajoshi321]

What if I have a webcam which can be accessed from the internet connected to my router but I'm not using a static IP. Or maybe I have a webserver running on my inside network and use dynamic dns ( this should allow me to use a dynamic IP to host that website) . Will my stuff still show up on the shodan website? And what if the dynamic IP I get is being used by multiple users via NAT? ( Wouldn't some isps do that for a broadband connection?)If it doesn't show up then I guess it would be safer for people to use a dynamic IP for small home applications especially if they don't have the knowledge or time to harden security on a router or as you showed just changing the default login or just having a login in the first place!

[@NullByteWHT]

Yeah, I'm not a 100% sure but I think it will pop-up on Shodan even if it's dynamic. Either way make your logins super strong. Use key exchange if you can.

[@satejratnaparkhi1529]

shodan is an amazing thing. thanks for the information it is really very helpful.

[@Dee-pf9dv]

I know this sounds dumb to u guys but what is the best laptop brands in 2020 in your opinion? Just curious, it’s clearly a matter of personal opinion and what your using it for....

[@ДмиртоСадовський]

tell me if i want to find IP cameras that are near me within 1-5 km ,,,, What search command need to enter ?

[@navinr9558]

You actually forgot to record this video in Incognito mode :P

[@Boogersgrow]

I thank you for your knowledge bro u rock . Keep up the good work and do the good fight for good

[@0day694]

Thank you. Your videos are always very informative.

[@spatrick652]

weis per zufall jemand wie man das suchergebniss von 200 auf 500 erhöht? ich habe gehört das es irgendwie über das phyton programm geht aber finde nicht heraus wie das geht

[@zyeuh2565]

How would anonymity work doing this with a shodan paid account ?

[@danieldolen1945]

Awesome. I've been waiting for a video like this.

[@k2kmaster462]

how to enable monitor mode in TL WN722n v2 upload video bro

[@originalbinaryhustler3876]

loved the video big man ❤

[@Osmosick]

Do you keep the VPN on while using Shodan?

[@tiagotiagot]

12:00 That's not an specific device, it's an android app that lets you use your phone or other android device as a remote camera

[@quagmire1130]

Is there a difference between Shodan and "Shodan Eye"?

[@diracspace5842]

I was waiting for this

[@panduvardhanb5870]

@nullbyte please list all the add-ons you are using.

[@topchief777]

I just want to clean out all the cookies on my phone. Is there a way to do that? And I don't mean the 'clear cookies" option. I mean a real cleaning. Thanks.

[@rodrigoaraujo1608]

Hello muito seu vídeo poderia também fazer um vídeo sobre o Censys?

[@mawkuri5496]

does provigil makes people not to blink?

[@DaRyteJuan]

IDK why, but I find this presentation side-splittingly funny.

[@NullByteWHT]

Thanks haha

[@reindeboer7374]

Hey man, I really love your video's, I am looking for some sort of laptop like yours, do you want to tell me the model? That would be great, you would really help me!

[@NullByteWHT]

Kody uses a MacBook Pro

[@reindeboer7374]

Null Byte Thanks!

[@gaming4life834]

I CAN HEAR LAKEY INSPIRED CHILL DAY In BACKGROUND, love that music

[@niki1520]

What laptop is best for kali linux ?

[@cursedmoth3621]

Any laptop

[@bruhdabones]

NIKI GAMING My 6 year old HP is fine, except for the battery. Also, slow computers are harder to update and install new software.

[@EvoX180]

Thinkpad x220 is good its old but trust me i have one with an ssd in it and its fast asf no slow downs

[@1.N.Decent]

Any laptop that has virtualization instructions ssd and an eth port. With all these one can keep snapshots of kali, mess around and work fast on reliable network connection.

[@Robin-ol7xd]

Did I miss it, or did he explain how to get to the device type? I'd like to know how to gather device information if the webcam is password protected.

[@shreyanshdubey179]

Hey, I just wanted to ask if it is possible to hack android or pc connected on same network without sending trojan. I know about eternal blue double pulsar and armitage but it is only applicable for windows that also running on version 7.

[@obiterdictum3]

wanna look for routers - advice?

[@vade1332]

I can't get it to run. It says: Traceback (most recent call last): File "sherlock.py", line 24, in from requests_futures.sessions import FuturesSession ModuleNotFoundError: No module named 'requests_futures'

[@SuperFritzFantom]

have you installed the module?

[@gibgib527]

the ip cam at 12:30 is hosted by a free android app called ip webcam

[@NullByteWHT]

Yep that's the easiest to use.

[@kalyanirajalinghambereskan3063]

Can you make more videos please?

[@rickybrambila9646]

6:33 he was looking for twinks ayyy lol

[@u1f98a]

lol wrong search box?

[@nashvillewebnet]

lul

[@lewyathan]

Trololo

[@lewyathan]

Trololo

[@zingclassy6457]

lol i just noticed that too

[@orionkanat6680]

my shodan lokes nothing like his, how to fix?

[@master.mind192]

how network unlocking process is done

[@MALCode_A799]

Whatever you do, don't remove the moral restraints.

[@NullByteWHT]

Yeah only hack what you have permission to

[@EthannCraftt]

I think you just showed us how that guy printed brofists on all those printers...

[@oentrepreneur]

What are you talking about?

[@williamkarper2131]

I heard of system shock and am not taking chances

[@Jaydenboateng]

@ Null Byte What's the best vpn to use

[@r-test3668]

dood I really like the trance music!

[@ris3733]

When ever I click on a webcam IP it just shows a white screen what do I do

[@DomDomPop]

Man that stupid Shodan used to give me nightmares from playing System Shock alone at night on my first laptop

[@hoomanparvizi5131]

Someone, please help! I've been trying to get the command line of shodan but whenever I put in the code or any code that I could find to download it I get this "easy_install shodan File "", line 1 easy_install shodan ^ SyntaxError: invalid syntax" can someone please tell me what I'm doing wrong or guide me to a tutorial I'm new to this and have no idea what I need to fix. I've tried different versions of python but it still does not work.

[@lesiostasio2542]

You don't install shodan in Python, you do it in the command line

[@ojitelikenechukwu3895]

I totally enjoyed this❤️

[@PhunkBustA]

shodan is also the antagonist from system shock

[@johnh5358]

I am having trouble finding an access point that does not have the default username and passwords. Any tips? Thanks

[@NullByteWHT]

Did you actually mean to say does have default... if you are only finding ones with default then that's what a hacker wants and you can just login and change it. If you can't find routers with default try lower budget mom and pop type places and homes with no techy people.

[@johnh5358]

@@NullByteWHT Yes my appoligies, i meant to say ones that still have a default set of userbame and passwords. Is there a way to narrow down a search to mom and pop places?

[@NullByteWHT]

It's not an exact science, just go to parts of town where it feels like people own and operate themselves. Avoid the big chain stores/restaurants they actually have an IT budget. And just a reminder you shouldn't hack any network without permission.

[@johnh5358]

@@NullByteWHT Thanks! I know not to hack this is all just a part of my learning proccess:) have a good day!

[@animeboy215]

Wow the sound is great

[@NullByteWHT]

Thanks

[@captainunderpants2816]

Nice job as usually

[@BR7Fan71]

That is very interesting. A bit scary, but interesting

[@kag198902]

bro please make a video on xss plss

[@janisbanis6882]

bro its so old

[@nicholaswinters6460]

@@janisbanis6882 d

[@yourpapichulo8859]

How do you watch in people’s houses?

[@peterkim9696]

Can someone use my home network ip addresses in his computer if he hecked my router ?

[@beverlybucchirie2765]

Tablets suck so bad,OMG!!! Lol I guess my question is,Have you ever done a search to see who's watching you? Or (More then one,My bad) What's your opinion on the early days When MIT was first starting out?

[@cul8terworld]

We need legislation to require random default passwords. I was aware this was an issue, just not at this scale!

[@OEFarredondo]

cul8terworld lol

[@RM-ff1lm]

cul8terworld - It's always the weakest people crying for more government rules and regulations. If you don't change your password, that's on you.

[@LockComputer2002]

R M we'll see how much you'd cry for more rules and legislation if you were stuck in a shithole country like North Korea

[@GrandmaBones666]

Legislation...lmao. Because the threats of politicians mean so much.

[@mahlab5554]

how to use twitter for this purpose

[@MrX-X-X]

Lmfao so Shodan from System Shock is finally here. I dunno whether to laugh or be scared of the future take over! Hahahah

[@lonwolf9023]

pls help me error E:could not open lock file /var/lib/abt/lists/ E:unable to lock directory /var/cache/apt/pkgcache.bin -remove caches(13:permission deniad) w:problem unlinking the file /var/cache/apt/srcpkgcache.bin -removecaches(13: permission denied) if i am trying to uograde and update this msg show , i cant upgrade and update

[@EvoX180]

Are you root?

[@lonwolf9023]

@@EvoX180 yes bro same issue in kali and parrot

[@y2ksw1]

Ok, then however it has a ridiculously high price tag for a proportionally small range and for this price you can get effortless an array of VPS, a system operator or administrator, and unlimited results.

[@AryanThakur-xu6ex]

Is viewing webcams like that legal?