Educause Security Discussion mailing list archives

FW: SHODAN Higher Ed Access


From: David Treble <David.Treble () UMANITOBA CA>
Date: Thu, 25 Apr 2013 14:51:42 +0000

FYI – I'm sure some of you are familiar with SHODAN.  You may not be aware that they are offering free access to 
Universities and Colleges.

The request is through an email to John  (jmath () surtri com<mailto:jmath () surtri com>).

1. Set up Shodanhq account.
2. Contact John as your universities representative, and ask him how you
can take advantage of the offer for Universities to obtain full access.
3. He will ask which account belongs to your university, tell him the
account you've set up.

http://www.shodanhq.com/

It looks like he might be handling these requests on his own so a sudden surge might take a bit to process.

Thanks to my colleague at Western who passed along the tip to our Canadian Universities security list.

For those who don't know, Shodan its a 'hackers' search engine.  Here are some presentations with more detail:

http://www.youtube.com/watch?v=5Cg34w8b_m4
http://www.youtube.com/watch?v=Pyi1mwowPUo
http://www.youtube.com/watch?v=8vEtcWuFoiA

DT

--
+++++++++++++++++++++++++++++++
David Treble    IT Security Coordinator
E3-640 EITC     University of Manitoba
David_Treble () umanitoba ca<mailto:David_Treble () umanitoba ca> - 204.474.8340

     Follow @uminfosec on Twitter
Ask me about the Infosec Mailing List!
http://blogs.cc.umanitoba.ca/ist-alerts/
+++++++++++++++++++++++++++++++

From: John <jmath () surtri com<mailto:jmath () surtri com>>
Date: Thursday, 25 April, 2013 2:13 AM
To: David Treble <David.Treble () umanitoba ca<mailto:David.Treble () umanitoba ca>>
Subject: Re: SHODAN University Access - University of Manitoba

David,

Yes! I'm offering free access to universities both through the website as well as the developer API.

And yes, I used to work at University of California San Diego so I have first-hand experience of how things work and a 
reason I make access available for free :) And feel free to advertise the offer wherever you think it would be useful. 
Also thank you for letting me know where all of this sudden interest came from, I was wondering what had happened :)

Anyways, I upgraded your account so you have all available add-ons for Shodan as well as the educational API plan, 
which gives you up to 10,000 API requests a month (i.e. up to 1 million results/ month). You can find some 
documentation on how to use the API at:

http://docs.shodanhq.com<http://docs.shodanhq.com/>

And you can find your API key as well as your usage stats on the Developer Center in Shodan:

http://www.shodanhq.com/api_doc

Oh, and if you're not sure what services Shodan covers or the type of data I'm indexing here's a list of all the ports 
I search for:

http://www.shodanhq.com/help/filters#port

I hope you'll find Shodan useful and let me know if there's anything else I can help you with!

Best regards,

-John

On Wed, Apr 24, 2013 at 7:13 AM, David Treble <David.Treble () ad umanitoba ca<mailto:David.Treble () ad umanitoba ca>> 
wrote:
Hi John,

A message to the Canadian University Security Professionals list this morning said you were offering complete access to 
Universities.

I admire this move and hope that many will take advantage.  As you are probably aware many Universities run a fairly 
open environment.  I've used your site several times in the past and look forward to a bit more access if possible.

My account is:

<snipped>

Can I advertise this on the Educause Security Professionals mailing list?

Regards,
David


--
Shodan - http://www.shodanhq.com<http://www.shodanhq.com/>

Follow me on Twitter
http://twitter.com/achillean
--
+++++++++++++++++++++++++++++++
David Treble    IT Security Coordinator
E3-640 EITC     University of Manitoba
David_Treble () umanitoba ca - 204.474.8340

     Follow @uminfosec on Twitter
Ask me about the Infosec Mailing List!
http://blogs.cc.umanitoba.ca/ist-alerts/
+++++++++++++++++++++++++++++++

Current thread: