Pierluigi Paganini
December 11, 2015
Now the hackers and experts have a new powerful tool for their analysis, it is Censys, a search engine quite similar to the most popular Shodan. Censys is a free search engine that was originally released in October by researchers from the University of Michigan, it is currently powered by Google.
Censys is a search engine that scans the Internet searching for devices and return aggregate reports on how resources (i.e. Devices, websites, and certificates) are configured and deployed.
Censys daily scans of the IPv4 address space searching for any devices and collecting related information.
“Censys is a search engine that allows computer scientists to ask questions about the devices and networks that compose the Internet. Driven by Internet-wide scanning, Censys lets researchers find specific hosts and create aggregate reports on how devices, websites, and certificates are configured and deployed.” states the description on the Censys official website.
Censys, like Shodan, maintains a complete database of every device exposed on the Internet. It represents a privileged instrument for the hackers that have to search for a specific target and need to gather information on its configuration. At the same time, security experts could easily locate poorly protected devices exposed over the internet.
“We have found everything from ATMs and bank safes to industrial control systems for power plants. It’s kind of scary,” said Zakir Durumeric, the researcher leading the Censys project at the University of Michigan and inventor of ZMap.
Censys was developed as a part of an open source project that aims at maintaining a “complete database of everything on the Internet,” the intent is to help security experts to assess the security of products and services exposed on the Internet.
Censys uses ZMap, a network scanner that analyzed 4 Billion IP addresses and collect information on a daily basis, and ZGrab, as an application layer scanner. The Censys architecture and the functions it implements are detailed in the research paper.
ZMap is able to scan specific machines searching for security vulnerabilities that could be potentially exploited.
Let me suggest to read the MIT Technology Review on Censys, entitled “A Search Engine for the Internet’s Dirty Secrets,” but most interesting is the step-by-step tutorial published by the development team.
Censys is already used by security experts, recently the researchers from SEC Consult have found that IoT devices are re-using cryptographic keys, leaving in danger millions of devices.
The experts analyzed 4000 firmware and found around 580 unique private keys, the use of Scans.io and Censys.io allowed them to discover that the same set of keys was widely re-used, on 580 keys, 230 are actively used.
| [adrotate banner=”9″] | [adrotate banner=”12″] |
(Security Affairs – Censys, hacking)
[adrotate banner=”5″]
[adrotate banner=”13″]
