[Boat]

Tools that can help in Finding Leaked Databases

Shodan is one of the most powerful search engines for discovering open databases.

? https://www.shodan.io

Some Queries to find exposed databases:

MongoDB:
"MongoDB Server Information" port:27017

Elasticsearch:
"port:9200 json" -auth

Redis:
"Redis Server" port:6379 -auth

MySQL:
"port:3306" "Server version"

PostgreSQL:
"PostgreSQL Database Server" port:5432

Firebase:
"port:443" "firebaseio.com"

Queries for leaked credentials:

filetype:sql "password"
filetype:json "username" "password"
filetype:txt "email" "pass"

Censys scans deeper than Shodan and finds database vulnerabilities.

? https://censys.io

services.mongodb.product="MongoDB"
services.elasticsearch.product="Elasticsearch"
services.mysql.product="MySQL"
services.postgresql.product="PostgreSQL"
services.redis.product="Redis"

LeakLooker (Automated Exposed Database Finder)

? https://github.com/woj-ciech/LeakLooker-X

python3 leaklooker.py --service elasticsearch
python3 leaklooker.py --service mongodb

FOFA & ZoomEye (Chinese Shodan Alternatives)
? FOFA: https://fofa.info
? ZoomEye: https://www.zoomeye.org

app="MongoDB"
app="Elasticsearch"
app="MySQL"

app:"MongoDB"
app:"MySQL"

[Alcxtraze]

shitty thread bro chat gpt x2 be like

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Attempted Scamming Thread-DATABASE-Database-Empik-com-Poland-11-825-92 | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[0909klk]

that's very useful, thanks for sharing, i'll search something...haaa