CyberCode Academy

Course 35 - Footprinting and Reconnaissance | Episode 3: Exploring Shodan and the Google Hacking Database

Listen Later
In this lesson, you’ll learn about: Shodan and Google Dorking (GHDB) in footprinting1. Shodan (Internet-Wide Device Discovery)🔹 What is Shodan?
  • Shodan
  • A search engine designed to find:
    • Internet-connected devices
    • Exposed services
🔹 What You Can Discover
  • IP addresses
  • Open ports
  • Operating systems
  • Device types (e.g., routers, cameras, servers)
🔹 Example Use Case
  • Searching for:
    • Cisco routers
  • Filtering by:
    • Geographic location
👉 Why it matters:
  • Helps identify:
    • Exposed infrastructure
    • Potential attack surface
2. Key Shodan Capabilities
  • Advanced filters:
    • Location-based searches
    • Service-specific queries
  • Real-world visibility into:
    • Global internet exposure
👉 Insight:
  • Many systems are:
    • Misconfigured
    • Publicly accessible
3. Google Dorking (GHDB)🔹 What is GHDB?
  • Google Hacking Database
  • A collection of:
    • Advanced Google search queries (dorks)
🔹 Purpose
  • Find:
    • Sensitive files
    • Misconfigured web pages
    • Hidden data
4. Common Google Dorking Techniques🔹 File Type Searches
  • Example:
    • .xlsx (Excel files)
👉 Can reveal:
  • Reports
  • Credentials (sometimes)
  • Internal data
🔹 Targeted Queries
  • Use operators like:
    • site:
    • filetype:
    • intitle:
5. Practical Considerations🔹 Handling Limitations
  • Google may:
    • Trigger CAPTCHA (human verification)
  • Requires:
    • Careful, slow searching
🔹 Navigating Results
  • Review multiple pages
  • Refine queries for accuracy
6. Legal & Ethical Use
  • Always:
    • Stay within authorized scope
    • Use tools for:
      • Security research
      • Defensive purposes
👉 Important:
  • These tools are powerful:
    • Misuse can lead to legal consequences
Key Takeaways
  • Shodan reveals internet-exposed devices and services
  • GHDB enables precision searching for sensitive data
  • Both tools are critical for OSINT and footprinting
  • Advanced search techniques improve accuracy
  • Ethical usage is mandatory
Big PictureThese tools help you:👉 Move from basic information → deep exposure analysis
  • Shodan → “What devices are exposed?”
  • GHDB → “What data is publicly accessible?”
Mental Model
  • Shodan → Infrastructure visibility
  • Google Dorking → Data discovery


You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy