Netlas.io

Here is an interesting article by Rapid7 about CVE-2022-36804 (scored 8,8) related to Bitbucket Server:
https://attackerkb.com/topics/iJIxJ6JUow/cve-2022-36804/rapid7-analysis

And here is a good example of Netlas.io search query using versions for this CVE:
https://app.netlas.io/responses/?q=tag.atlassian_bitbucket.version%3A%5B7.6%20TO%207.6.17%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B7.17%20TO%207.17.10%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B7.21%20TO%207.21.4%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B8.0%20TO%208.0.3%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B8.1%20TO%208.1.3%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B8.2%20TO%208.2.2%5D%20OR%20tag.atlassian_bitbucket.version%3A%5B8.3%20TO%208.3.1%5D&page=1&indices=

We have significantly improved Netlas Domain Resolver. The latest resolve brings much better quality 💪More than 2 billion domains resolved 🌎

Did you know google.com has more than 500 A-records?
https://app.netlas.io/domains/?q=domain%3Agoogle.com&page=1&indices=

Netlas (sub)domain search will be available through OWASP Amass soon.
https://github.com/OWASP/Amass/pull/818

Fresh 1-day vulnerabilities in VMware Workspace ONE Access, Identity Manager и vRealize Automation (CVE-2022-31656 - CVE-2022-31659) as seen on Netlas.io. CVSSv3 - 9,8!

http.body:"VMware vRealize Automation Appliance" OR http.favicon.hash_sha256:7eef5dc4dc1055c6e3e479a8ab95efbe0a11660fa7152d1163377bca7d2b8428

Netlas.io Dorks for finding sensitive IoT Data (adopted and little bit expanded "TOP Shodan Dorks for finding sensitive IoT data" by @0xhunster)

Try these dorks at https://app.netlas.io

High-profile vulnerabilities in PLC and HMI devices by AutomationDirect (CVE-2022-2003 - CVE-2022-2006) as seen on http://Netlas.io. The United States is the most affected.
#vulnerability_map

Did you know that Netlas IP whois database is also available through the API and CLI?
More importantly, you can purchase and download complete Netlas IP whois data collection from our datastore.
https://app.netlas.io/datastore/product/40/

Meet the Birthday Netlas.io Release! Brand new Whois search tool, advanced support for popular IoT protocols, redesigned search examples followed by help articles and much more.
https://netlas.io/blog/tpost/ejektipnj1-netlas-v0160-release-notes

Forward DNS datasets have been updated today. More than 2,1 billion of records!
https://app.netlas.io/datastore/

There were several requests to make a light theme. We hope you'll enjoy it!

Here is an interesting review of Netlas.io containing examples of use and comparison with shodan.io, censys.io, fofa.so, zoomeye.org and others
https://www.hackread.com/netlas-io-a-new-atlas-of-internet/

Tom Kraz posted a great review with search examples and practical tips. Huge thanks from the Netlas.io team! #Netlas_io_Hints
https://tkcyber.com/index.php/2022/02/23/what-is-netlas-and-how-to-use-it-in-2022/

Are you using a honeypot to secure your network? Internet scanners are good at detecting honeypots. Check if Netlas.io was able to uncover yours.

Subdomain Dictionaries – new datasets published last Friday. It is an aggregation of subdomains by different zones sorted by frequency of use.

The TOP-100 dictionary is free to all registered users. TOP 1K and 10K are also available for a small fee.
https://app.netlas.io/datastore/

Have you heard about the DeadBolt attack targeting QNAP NAS devices? It's horrible! 😨 Netlas.io is scanning the internet right now. You can see how new encrypted devices appear almost in real time.
https://app.netlas.io/responses/?q=http.body%3A%22All%20your%20files%20have%20been%20locked%20by%20DeadBolt%22&page=1&indices=32%2C29

Interested in how often Netlas.io scans the Internet? Go to the help section -> "Scanners, Scans & Datasources" tab. There is information about all active indices, including scan periods and the number of records.

As you can see, Netlas is making another IP/Domain scan right now. Pay attention to the numbers. Each new scan gives more data!

Netlas.io completed another domain name resolution process today. The most relevant domain index has 1.8 billion records now (7.7% increase)!
2nd level domains - 437 880 749
3rd level domains - 763 323 850
4th and deeper levels - 632 035 600
Do you think Netlas.io was able to find your domain and subdomains? You can check it out right now!

Did you know, Netlas.io operates more than 1,7 billion domain names? All types of DNS records are available. Improved datastore and new datasets come with the last Netlas.io update.
https://netlas.io/blog/tpost/h0j8vpujm1-netlas-v0140-release-notes

NETGEAR makes cool devices. However, it is quite risky to publish an admin panel without authorization by default. We noticed that each new scan finds several hundred devices with unauthorized admin panel access. Mostly AX, AC and EX series access points and repeaters.

Instructive 3 minutes “Netlas.io for Bug Bounty” review with tricky query examples by @tbbhunter on
https://medium.com/@thebugbountyhunter/review-netlas-io-for-bug-bounty-c062a87b544f