Integration of Shodan in HuntDown
Nowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access s...
| Autor: | |
|---|---|
| Formato: | tesis de maestría |
| Fecha de publicación: | 2025 |
| País: | España |
| Recursos: | Universitat Politècnica de Catalunya (UPC) |
| Repositorio: | UPCommons. Portal del coneixement obert de la UPC |
| Idioma: | inglés |
| OAI Identifier: | oai:upcommons.upc.edu:2117/450984 |
| Acesso em linha: | https://hdl.handle.net/2117/450984 |
| Access Level: | acceso abierto |
| Palavra-chave: | Penetration testing (Computer security) Shodan Pentesting HuntDown Cybersecurity JSON Reconnaissance Prova de penetració (Seguretat informàtica) Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica |
| id |
ES_ba7eebc1076acf4fa7d65304617c33c3 |
|---|---|
| oai_identifier_str |
oai:upcommons.upc.edu:2117/450984 |
| network_acronym_str |
ES |
| network_name_str |
España |
| repository_id_str |
|
| spelling |
Integration of Shodan in HuntDownIntegration of Shodan in HuntDownPeralta Farré, GuillemPenetration testing (Computer security)ShodanPentestingHuntDownCybersecurityJSONReconnaissanceProva de penetració (Seguretat informàtica)Àrees temàtiques de la UPC::Informàtica::Seguretat informàticaNowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access systems and obtain as much information and as many sensitive assets as possible. In this project, we extend an existing open-source pentesting application by integrating a new attack module, Shodan, a web-based search engine for internet-connected devices. With this addition, users can leverage Shodan to analyze public devices on the internet or within their own networks by searching for open ports, services, and other relevant information. Shodan supports a wide variety of queries, and in our implementation, we have integrated the most useful ones for practical pentesting scenarios. After the executing a query, the application provides users a summarized result in the form of a synthesized table and a report, tailored to the specific search performed. This enhancement provides a crucial and valuable tool for the reconnaissance phase of an attack, which is often considered the most critical step in the pentesting process.Universitat Politècnica de CatalunyaSerral Gracià, René20252025-07-0220262026-01-21master thesishttp://purl.org/coar/resource_type/c_bdccNAhttp://purl.org/coar/version/c_be7fb7dd8ff6fe43info:eu-repo/semantics/masterThesisapplication/pdfhttps://hdl.handle.net/2117/450984reponame:UPCommons. Portal del coneixement obert de la UPCinstname:Universitat Politècnica de Catalunya (UPC)Inglésengopen accesshttp://purl.org/coar/access_right/c_abf2info:eu-repo/semantics/openAccessoai:upcommons.upc.edu:2117/4509842026-05-27T15:37:01Z |
| dc.title.none.fl_str_mv |
Integration of Shodan in HuntDown Integration of Shodan in HuntDown |
| title |
Integration of Shodan in HuntDown |
| spellingShingle |
Integration of Shodan in HuntDown Peralta Farré, Guillem Penetration testing (Computer security) Shodan Pentesting HuntDown Cybersecurity JSON Reconnaissance Prova de penetració (Seguretat informàtica) Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica |
| title_short |
Integration of Shodan in HuntDown |
| title_full |
Integration of Shodan in HuntDown |
| title_fullStr |
Integration of Shodan in HuntDown |
| title_full_unstemmed |
Integration of Shodan in HuntDown |
| title_sort |
Integration of Shodan in HuntDown |
| dc.creator.none.fl_str_mv |
Peralta Farré, Guillem |
| author |
Peralta Farré, Guillem |
| author_facet |
Peralta Farré, Guillem |
| author_role |
author |
| dc.contributor.none.fl_str_mv |
Serral Gracià, René |
| dc.subject.none.fl_str_mv |
Penetration testing (Computer security) Shodan Pentesting HuntDown Cybersecurity JSON Reconnaissance Prova de penetració (Seguretat informàtica) Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica |
| topic |
Penetration testing (Computer security) Shodan Pentesting HuntDown Cybersecurity JSON Reconnaissance Prova de penetració (Seguretat informàtica) Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica |
| description |
Nowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access systems and obtain as much information and as many sensitive assets as possible. In this project, we extend an existing open-source pentesting application by integrating a new attack module, Shodan, a web-based search engine for internet-connected devices. With this addition, users can leverage Shodan to analyze public devices on the internet or within their own networks by searching for open ports, services, and other relevant information. Shodan supports a wide variety of queries, and in our implementation, we have integrated the most useful ones for practical pentesting scenarios. After the executing a query, the application provides users a summarized result in the form of a synthesized table and a report, tailored to the specific search performed. This enhancement provides a crucial and valuable tool for the reconnaissance phase of an attack, which is often considered the most critical step in the pentesting process. |
| publishDate |
2025 |
| dc.date.none.fl_str_mv |
2025 2025-07-02 2026 2026-01-21 |
| dc.type.none.fl_str_mv |
master thesis http://purl.org/coar/resource_type/c_bdcc NA http://purl.org/coar/version/c_be7fb7dd8ff6fe43 |
| dc.type.openaire.fl_str_mv |
info:eu-repo/semantics/masterThesis |
| format |
masterThesis |
| dc.identifier.none.fl_str_mv |
https://hdl.handle.net/2117/450984 |
| url |
https://hdl.handle.net/2117/450984 |
| dc.language.none.fl_str_mv |
Inglés eng |
| language_invalid_str_mv |
Inglés |
| language |
eng |
| dc.rights.none.fl_str_mv |
open access http://purl.org/coar/access_right/c_abf2 |
| dc.rights.openaire.fl_str_mv |
info:eu-repo/semantics/openAccess |
| rights_invalid_str_mv |
open access http://purl.org/coar/access_right/c_abf2 |
| eu_rights_str_mv |
openAccess |
| dc.format.none.fl_str_mv |
application/pdf |
| dc.publisher.none.fl_str_mv |
Universitat Politècnica de Catalunya |
| publisher.none.fl_str_mv |
Universitat Politècnica de Catalunya |
| dc.source.none.fl_str_mv |
reponame:UPCommons. Portal del coneixement obert de la UPC instname:Universitat Politècnica de Catalunya (UPC) |
| instname_str |
Universitat Politècnica de Catalunya (UPC) |
| reponame_str |
UPCommons. Portal del coneixement obert de la UPC |
| collection |
UPCommons. Portal del coneixement obert de la UPC |
| repository.name.fl_str_mv |
|
| repository.mail.fl_str_mv |
|
| _version_ |
1869417902957920256 |
| score |
15,811543 |