ZoomEye is a search engine for Cyberspace
In Chinese ancient legends, there’s a famous ghost buster named Zhong Kui. Just like him, ZoomEye is created for hunting the demons in Cyberspace.
ZoomEye is a search engine developed by Knownsec Inc, a Chinese security firm based in Beijing. The first version of ZoomEye was released on 1st July 2013 and it underwent continuos development until now reaching version 3.
ZoomEye uses Xmap and Wmap at its core for grabbing data from publicly exposed devices and web services and doing fingerprint analysis.
HOW TO USE IT
ZoomEye uses some keywords like every search engine and it’s very simple to use.
Search by application:
app: application name
ver: version number
Search by location:
country: country code (for example: UK, IT, ES, FR, CN, JP..)
city: name of city
You can combine multiple countries and cities in your queries, the filters act as a logical OR.
Search by port:
port: port number
You can combine multiple ports in your queries, the filters act as a logical OR.
Search by OS:
os: name of the operating system (for example os:linux)
Search by service:
service: service name
You can combine multiple services in your queries, the filters act as a logical OR. For a full list of services, see https://svn.nmap.org/nmap/nmap-services.
Search by hostname:
hostname: hostname (for example hostname:google.com)
You can combine multiple hostnames in your queries, the filters act as a logical OR.
Search by IP Address:
ip: ip address (for example ip:184.108.40.206)
You can combine multiple IPs in your queries, the filters act as a logical OR.
Search by CIDR:
cidr: cidr segment (for example cidr:220.127.116.11/24)
Registered users are limited to 5 searches/day for CIDR.
Search by site:
site: domain name (for example site:google.com)
Search by HTTP Headers:
headers: headers in HTTP request
Search by SEO keywords:
keywords: keywords defined inside <meta name=”Keywords”>
Search by description:
desc: description inside <meta name=”description”>
Search by title:
title: title inside <title>
For those interested in large scale queries, an API is available. See here for more information: https://www.zoomeye.org/help/api.
FANCY A FREE METERPRETER SHELL?
ZoomEye features a dedicated section for Industrial Control Systems and Supervisory Control And Data Acquisition systems. See here: http://ics.zoomeye.org.
Author: Fabio Baroni Date: 2016-01-13 16:07:25