Burp Suite VS Shodan

Burp Suite Reviews

Shodan Reviews

Burp Suite mentions (12)

• How do I by pass two step verification?

  Check https://portswigger.net, they have learning material and labs about this topic. Source: over 1 year ago

• I want to make a website with django. What are best courses/syllabus for it?

  I ask about serving websites because understanding how a web server works (very basically) with a browser or any client is a huge step in understanding HTTP, host headers, and even host header attacks (if you're into that sort of thing.. As an aside I did a quick google search and https://portswigger.net/ showed up.. Apparently they have interactive labs and very informative documentation on various attack... Source: over 1 year ago

• How to get better at CTFs?

  As you are quite new to the hobby, I would definitely recommend you go to portswigger.net academy. They give you a quite thorough understanding in all the fundamentals and they have labs set up where you can practice everything you learn at each step. The best part is you can learn at your own pace and it's all free. Source: over 1 year ago

• Intercept android app traffic in Burp Suite: From root to hack [ULTIMATE GUIDE for bug hunters]

  Connect your PC (with Burp Suite installed) and Android to the same network. > Note — Here my PC’s IP is 192.168.43.20 and Android’s IP is 192.168.43.180. - Source: dev.to / almost 2 years ago

• Does PEN-200 do any explaining about the various pieces of web apps and what they are used for? If not, are there any great sources on YouTube or Udemy that would provide me with the fundamentals?

  Web App Security Academy is free through Portswigger. Which is great coverage to learn End-to-End how to find vulnerabilities in a web application yourself. After you get thru that, there's DVWA and Juice Shop... And you can even find these as rooms on TryHackMe if you don't want to self-host it. However, the Web App Security Academy is basically the live-learning environment for the Web App Hackers Handbook...... Source: almost 2 years ago

Shodan mentions (92)

• Introducing OSINT Template Engine: An open source OSINT Tool.

  Transform OSINT sources such as shodan, bgpview & urlscan into templates which you can use to query & store any and each of the API endpoints they provide. Source: 9 months ago

• Some outgoing ports (e.g, port 22) are blocked

  I'm a little surprised you're asking this but as you don't know - if you set the rulebase correctly, you won't get hammered by "public". A lot of people (of course not people here) don't do that which is why shodan.io is full of servers with SSH exposed to the world. Source: 9 months ago

• Does anyone want to vet this job opportunity?

  Eh, request a full demo before signing anything. If they make you buy before you can try, move on. Just be advised that data they collect from your site may be used in a database that puts a target on your back. Similar to how shodan.io works. I would probe them on how they handle customer data and if data is shared, partitioned, or isolated to ensure safety from a platform leak. They want to be a security... Source: 10 months ago

• Security issue or coincidence?

  My network is being hit by China and Russia many times per hour. Make sure your firewall is up-to-date and not have any services available on the Internet (WAN). Look at shodan.io which shows you _everything_ is searched on the Internet. Source: 10 months ago

• Onion sites crawling: Weird mass "HTTP/1.1 200 " HTTP status line returning?

  In the cases of nginx or apache, I suspect they may be acting as proxies to some backend that also chooses not to send a reason phrase back. Searching for "Reason Phrase" yields a number of bug reports/frameworks that may omit it, and shodan.io shows apache tomcat and a few other services/software that omit the code as well. Source: 11 months ago