forked from ek0mssavi0r/Flock_SCAN
81 lines
2.2 KiB
Python
81 lines
2.2 KiB
Python
#!/usr/bin/env python3
|
|
"""
|
|
shodan_queries.py - Generate Shodan queries for CVE-2025 vulnerabilities + Discovery
|
|
"""
|
|
|
|
QUERIES = {
|
|
'CVE-2025-59403': [
|
|
'title:"Falcon"',
|
|
'title:"Sparrow"',
|
|
'"/api/v1/admin"',
|
|
'"/api/v1/system"',
|
|
'"/api/v1/debug"',
|
|
'port:5555 "Android"',
|
|
'"Android Debug Bridge"',
|
|
'port:5037 adb',
|
|
'http.title:"ADB"',
|
|
'"Falcon" "api" port:443',
|
|
'"Sparrow" "api" port:443',
|
|
'"/api/v1/execute"',
|
|
'"/api/v1/command"',
|
|
],
|
|
'CVE-2025-59407': [
|
|
'"Android" "v6.35.33"',
|
|
'"keystore" "hardcoded"',
|
|
'"crypto" "key" "Android"',
|
|
'"/api/v1/keystore"',
|
|
'"/api/v1/security"',
|
|
'"hardcoded_key"',
|
|
'"default_key"',
|
|
],
|
|
'CVE-2025-47818': [
|
|
'"hotspot" "fallback"',
|
|
'"/api/v1/hotspot"',
|
|
'"default" "hotspot" "credentials"',
|
|
'"/api/v1/wifi"',
|
|
'"hotspot" "config"',
|
|
'"wifi" "credentials"',
|
|
],
|
|
'CVE-2025-47823': [
|
|
'"ALPR" "v2.0"',
|
|
'"ALPR" "v2.1"',
|
|
'"ALPR" "v2.2"',
|
|
'"/api/v1/alpr"',
|
|
'"license plate" "system"',
|
|
'"LPR" "firmware"',
|
|
'"ALPR" "firmware"',
|
|
'"/alpr" "/api"',
|
|
],
|
|
'FLOCK_DISCOVERY': [
|
|
'title:"admin_page_template"',
|
|
'"admin_page_template.html"',
|
|
'"/onvif/device_service" Flock',
|
|
'"SpeedPourer" port:21',
|
|
'"FRP" "flock" port:7000',
|
|
'"M5NanoC6" "flock"',
|
|
'"flock" "ADB" port:5555',
|
|
'ssl.cert.subject.cn:"*.flocksafety.com"',
|
|
'ssl.cert.subject.cn:"*.ops.flocksafety.com"',
|
|
'org:"Flock Safety"',
|
|
'"flock-hibiki"',
|
|
],
|
|
}
|
|
|
|
def generate_shodan_queries():
|
|
"""Generate combined Shodan queries"""
|
|
print("# CVE-2025 Vulnerability + Discovery Shodan Queries")
|
|
print("# ==================================================")
|
|
print()
|
|
for cve, queries in QUERIES.items():
|
|
print(f"# {cve}")
|
|
print(" OR ".join(queries))
|
|
print()
|
|
all_q = []
|
|
for qs in QUERIES.values():
|
|
all_q.extend(qs)
|
|
print("# ALL Queries Combined")
|
|
print(" OR ".join(all_q))
|
|
|
|
if __name__ == "__main__":
|
|
generate_shodan_queries()
|