Integration of Shodan in HuntDown

Nowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access s...

ver descrição completa

Detalhes bibliográficos
Autor: Peralta Farré, Guillem
Formato: tesis de maestría
Fecha de publicación:2025
País:España
Recursos:Universitat Politècnica de Catalunya (UPC)
Repositorio:UPCommons. Portal del coneixement obert de la UPC
Idioma:inglés
OAI Identifier:oai:upcommons.upc.edu:2117/450984
Acesso em linha:https://hdl.handle.net/2117/450984
Access Level:acceso abierto
Palavra-chave:Penetration testing (Computer security)
Shodan
Pentesting
HuntDown
Cybersecurity
JSON
Reconnaissance
Prova de penetració (Seguretat informàtica)
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
id ES_ba7eebc1076acf4fa7d65304617c33c3
oai_identifier_str oai:upcommons.upc.edu:2117/450984
network_acronym_str ES
network_name_str España
repository_id_str
spelling Integration of Shodan in HuntDownIntegration of Shodan in HuntDownPeralta Farré, GuillemPenetration testing (Computer security)ShodanPentestingHuntDownCybersecurityJSONReconnaissanceProva de penetració (Seguretat informàtica)Àrees temàtiques de la UPC::Informàtica::Seguretat informàticaNowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access systems and obtain as much information and as many sensitive assets as possible. In this project, we extend an existing open-source pentesting application by integrating a new attack module, Shodan, a web-based search engine for internet-connected devices. With this addition, users can leverage Shodan to analyze public devices on the internet or within their own networks by searching for open ports, services, and other relevant information. Shodan supports a wide variety of queries, and in our implementation, we have integrated the most useful ones for practical pentesting scenarios. After the executing a query, the application provides users a summarized result in the form of a synthesized table and a report, tailored to the specific search performed. This enhancement provides a crucial and valuable tool for the reconnaissance phase of an attack, which is often considered the most critical step in the pentesting process.Universitat Politècnica de CatalunyaSerral Gracià, René20252025-07-0220262026-01-21master thesishttp://purl.org/coar/resource_type/c_bdccNAhttp://purl.org/coar/version/c_be7fb7dd8ff6fe43info:eu-repo/semantics/masterThesisapplication/pdfhttps://hdl.handle.net/2117/450984reponame:UPCommons. Portal del coneixement obert de la UPCinstname:Universitat Politècnica de Catalunya (UPC)Inglésengopen accesshttp://purl.org/coar/access_right/c_abf2info:eu-repo/semantics/openAccessoai:upcommons.upc.edu:2117/4509842026-05-27T15:37:01Z
dc.title.none.fl_str_mv Integration of Shodan in HuntDown
Integration of Shodan in HuntDown
title Integration of Shodan in HuntDown
spellingShingle Integration of Shodan in HuntDown
Peralta Farré, Guillem
Penetration testing (Computer security)
Shodan
Pentesting
HuntDown
Cybersecurity
JSON
Reconnaissance
Prova de penetració (Seguretat informàtica)
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
title_short Integration of Shodan in HuntDown
title_full Integration of Shodan in HuntDown
title_fullStr Integration of Shodan in HuntDown
title_full_unstemmed Integration of Shodan in HuntDown
title_sort Integration of Shodan in HuntDown
dc.creator.none.fl_str_mv Peralta Farré, Guillem
author Peralta Farré, Guillem
author_facet Peralta Farré, Guillem
author_role author
dc.contributor.none.fl_str_mv Serral Gracià, René
dc.subject.none.fl_str_mv Penetration testing (Computer security)
Shodan
Pentesting
HuntDown
Cybersecurity
JSON
Reconnaissance
Prova de penetració (Seguretat informàtica)
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
topic Penetration testing (Computer security)
Shodan
Pentesting
HuntDown
Cybersecurity
JSON
Reconnaissance
Prova de penetració (Seguretat informàtica)
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
description Nowadays, with the widespread of internet and online services, the need to protect these systems is increasing. One of the key and most used methods to evaluate, protect and improve security of systems is penetration testing or pentesting. Pentesting is a service consisting on attempting to access systems and obtain as much information and as many sensitive assets as possible. In this project, we extend an existing open-source pentesting application by integrating a new attack module, Shodan, a web-based search engine for internet-connected devices. With this addition, users can leverage Shodan to analyze public devices on the internet or within their own networks by searching for open ports, services, and other relevant information. Shodan supports a wide variety of queries, and in our implementation, we have integrated the most useful ones for practical pentesting scenarios. After the executing a query, the application provides users a summarized result in the form of a synthesized table and a report, tailored to the specific search performed. This enhancement provides a crucial and valuable tool for the reconnaissance phase of an attack, which is often considered the most critical step in the pentesting process.
publishDate 2025
dc.date.none.fl_str_mv 2025
2025-07-02
2026
2026-01-21
dc.type.none.fl_str_mv master thesis
http://purl.org/coar/resource_type/c_bdcc
NA
http://purl.org/coar/version/c_be7fb7dd8ff6fe43
dc.type.openaire.fl_str_mv info:eu-repo/semantics/masterThesis
format masterThesis
dc.identifier.none.fl_str_mv https://hdl.handle.net/2117/450984
url https://hdl.handle.net/2117/450984
dc.language.none.fl_str_mv Inglés
eng
language_invalid_str_mv Inglés
language eng
dc.rights.none.fl_str_mv open access
http://purl.org/coar/access_right/c_abf2
dc.rights.openaire.fl_str_mv info:eu-repo/semantics/openAccess
rights_invalid_str_mv open access
http://purl.org/coar/access_right/c_abf2
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
dc.publisher.none.fl_str_mv Universitat Politècnica de Catalunya
publisher.none.fl_str_mv Universitat Politècnica de Catalunya
dc.source.none.fl_str_mv reponame:UPCommons. Portal del coneixement obert de la UPC
instname:Universitat Politècnica de Catalunya (UPC)
instname_str Universitat Politècnica de Catalunya (UPC)
reponame_str UPCommons. Portal del coneixement obert de la UPC
collection UPCommons. Portal del coneixement obert de la UPC
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869417902957920256
score 15,811543