Hacker News new | ask | show | jobs
by achillean 2465 days ago
Shodan also scans via domains to identify the proper certificate for websites that require a valid SNI.
2 comments
tbiehn 2465 days ago
Interesting, some results out of Shodan were surprising - this might be the reason. How do you pick what domains to try?
link
achillean 2465 days ago
Btw you can also see the info we have for a domain using our DNSDB. For example, if you have the latest version of our CLI:

shodan domain uber.com

link
achillean 2465 days ago
We have a database of 400+ million hostnames that we scan each month.
link
tbiehn 2465 days ago
So if a host supports SNI you send it 400+mil requests? C'mon, dish.
link
Avamander 2465 days ago
I haven't seen that, maybe if you manually request a scan, then.
link