[Boat]

Tools that can help in Finding Leaked Databases

Shodan is one of the most powerful search engines for discovering open databases.

? https://www.shodan.io

Some Queries to find exposed databases:

MongoDB: "MongoDB Server Information" port:27017 Elasticsearch: "port:9200 json" -auth Redis: "Redis Server" port:6379 -auth MySQL: "port:3306" "Server version" PostgreSQL: "PostgreSQL Database Server" port:5432 Firebase: "port:443" "firebaseio.com"

Queries for leaked credentials:

filetype:sql "password" filetype:json "username" "password" filetype:txt "email" "pass"

Censys scans deeper than Shodan and finds database vulnerabilities.

? https://censys.io

services.mongodb.product="MongoDB" services.elasticsearch.product="Elasticsearch" services.mysql.product="MySQL" services.postgresql.product="PostgreSQL" services.redis.product="Redis"

LeakLooker (Automated Exposed Database Finder)

? https://github.com/woj-ciech/LeakLooker-X

python3 leaklooker.py --service elasticsearch python3 leaklooker.py --service mongodb

FOFA & ZoomEye (Chinese Shodan Alternatives)
? FOFA: https://fofa.info
? ZoomEye: https://www.zoomeye.org

app="MongoDB" app="Elasticsearch" app="MySQL"

app:"MongoDB" app:"MySQL"

[Alcxtraze]

shitty thread bro chat gpt x2 be like

[0909klk]

that's very useful, thanks for sharing, i'll search something...haaa