IOT Cybersecurity with API

TOP vulnerabilidades IOT
https://www.tuvsud.com/en/resource-centre/infographics/top-10-consumer-iot-cybersecurity-vulnerabilities-in-2023
https://www.tuvsud.com/en/-/media/global/pdf-files/infographics/tuvsud-cps-iot-vulnerabilities-2023-infographics.pdf


Repositorio APIs de OSINT
https://github.com/cipher387/API-s-for-OSINT


----------------------Siderfoot Kali
Ejecutar en Kali - Spiderfoot
spiderfoot 127.0.0.1:!234

---------------------------------SHODAN
Shodan, complicado gestionar tantos datos
Tipos de usuarios
Bypass Shodan con mailinator

------------------------------Fofa
https://en.fofa.info/

----------------CENSYS
https://search.censys.io/




-------------------------------------SHODAN
https://developer.shodan.io/
https://developer.shodan.io/api
https://api.shodan.io/shodan/host/{150.214.110.200}?key=wAfOeLa3esBFcUODlBDI1WKsaQ16HSiX
https://help.shodan.io/command-line-interface/0-installation

shodan init API-KEY

Las consultas enterprise no se permiten
Notifiers (monitorizar) --- Cuesta créditos
Tres posibilidades Curl / Python / Client

shodan host 1.1.1.1
curl -X GET URL_API >> out.txt

https://jsonlint.com/
https://codebeautify.org/jsonvalidator

Ej: Account profile
Ej: Consulta tag password, camera, webcam
Añadir &size=500

Comparar consultas de la Web y con la API con el cliente
shodan count port:22


------------------Servicios para obtener información

https://dnsdumpster.com/
https://viz.greynoise.io/
https://hidemy.io/en/port-scanner/
jdoon video domótica