通信侦察_Spyse –用于快速侦察的网络安全搜索引擎

墨蓝 2022-12-08 04:43 169阅读 0赞

![eb8abca305563861bbb136726afbd265.png][]

通信侦察

Spyse is a relatively new service in cybersecurity, but their innovative approaches have gained the attention of many pentesters and cybersecurity specialists.

Spyse是一项相对较新的网络安全服务，但其创新方法已引起许多渗透测试者和网络安全专家的关注。

The service itself is a [cybersecurity search engine][] which can be used for gathering mass technical data from the internet. The special thing about Spyse, is that they have one of the largest databases of its kind: hosting all the technical internet data that specialists might need for finding vulnerabilities, gathering competitor data, or just overall reconnaissance.

该服务本身是一个[网络安全搜索引擎][cybersecurity search engine] ，可用于从互联网收集大量技术数据。 Spyse的特别之处在于，它们拥有同类数据库中最大的数据库之一：托管专家可能需要的所有技术互联网数据，以发现漏洞，收集竞争对手的数据或仅进行整体侦察。

![the data you get][]

Read on to learn how they collect, store, and provide the data.

继续阅读以了解他们如何收集，存储和提供数据。

### Spyse如何在全球范围内收集数据 **(**How Spyse Collects Data Globally**)** ###

Spyse engine performs regular data scans all over the world. This is done thanks to a global server distribution system, which not only lets them bypass area scanning restrictions and ISP blocking, but enables them to harvest much more data from their sources than you would normally get.

Spyse引擎在全世界范围内执行常规数据扫描。 这要归功于全球服务器分发系统，该系统不仅使他们能够绕过区域扫描限制和ISP阻止，而且使他们能够从源中收集比您通常获取的更多的数据。

![Server map][]

Their scanning infrastructure is composed of ten self-developed scanners. Each of these scanners focuses on collecting specific types of information. After the data is gathered, it gets processed by sorting algorithms and stored into the Spyse database.

他们的扫描基础设施由十台自行开发的扫描仪组成。 这些扫描仪均专注于收集特定类型的信息。 收集数据后，将通过排序算法对其进行处理，并将其存储到Spyse数据库中。

### 数据库浏览 **(**Database Browsing**)** ###

The database has all the data users would need for reconnaissance stored and instantly available. Not only that, but searching for data lets users see interlinked, or connected results. This makes for more browsing opportunities like gaining extra information on targets, seeing more vectors of attack, even visualizing tech-data relationships between different companies.

该数据库存储了用户进行侦查所需的所有数据，并可以立即使用。 不仅如此，通过搜索数据，用户还可以查看相互关联或关联的结果。 这带来了更多的浏览机会，例如获得有关目标的更多信息，查看更多的攻击媒介，甚至可视化不同公司之间的技术数据关系。

The database itself stores over 7 billion documents of hot data on 50 high-functioning and most reliable servers. This data contains everything: DNS records, SSL/TLS certificate data, domains and subdomains of various organizations, IP data, and much more. The biggest perk is the fact that you can access all of it instantly, without having to wait for scans.

数据库本身在50台高性能和最可靠的服务器上存储了超过70亿个热数据文档。 该数据包含所有内容：DNS记录，SSL / TLS证书数据，各种组织的域和子域，IP数据等等。 最大的好处是您可以立即访问所有内容，而不必等待扫描。

### Web界面，API，Python **(**Web Interface, API, Python**)** ###

Spyse can be accessed through a web interface and an API.

可以通过Web界面和API访问Spyse。

The web interface looks like a familiar search engine perked for cybersecurity. Search results return in tables which can then be filtered to get a more convenient look. All found results can then be downloaded and accessed offline.

Web界面看起来像是一个熟悉的搜索引擎，可为网络安全服务。 搜索结果返回到表格中，然后可以对其进行过滤以获得更方便的外观。 然后，所有发现的结果都可以下载并离线访问。

Alternatively, users can use this search engine via flexible API or integrate it with their tools and services. API has a documentation on Swagger, which makes it a pleasure to work with. It’s flexible, and can be used with many methods which are outlined on the [API documentation][].

另外，用户可以通过灵活的API使用此搜索引擎，也可以将其与他们的工具和服务集成。 API上有关于Swagger的文档，这使它很有趣。 它很灵活，可以与[API文档][API documentation]中概述的许多方法一起使用。

### 额外的生产力工具 **(**Extra Productivity Tools**)** ###

There are two handy features that alleviate the utility of this cybersecurity search engine.

有两个方便的功能可减轻此网络安全搜索引擎的使用。

The Advanced Search is a live filter which helps sort big chunks of data as you’re browsing through the database. Users can apply up to 5 search parameters per query to extract very specific data that can’t be received with a simple search. For example: searching for ports users can obtain all open ports with specific CVEs, define products, applications, OS, and more in relation to some company.

高级搜索是一个实时筛选器，可帮助您在浏览数据库时对大块数据进行排序。 用户可以为每个查询应用多达5个搜索参数，以提取非常简单的数据无法接收的非常具体的数据。 例如：搜索端口用户可以获得具有特定CVE的所有打开的端口，定义与某家公司有关的产品，应用程序，操作系统等。

To get quick information about open ports users may use Spyse’s [port scanner][] that provides instant data without waiting for long scans.

为了获得有关开放端口的快速信息，用户可以使用Spyse的[端口扫描程序][port scanner] ，该程序提供即时数据，而无需等待长时间的扫描。

![advanced search][]

Spyse Scoring is another powerful feature which analyzes targets for vulnerabilities. It compares all information found by spyse scanners, and shows the level of security based on the rating of 0-100. Each found vulnerability is presented with expanded details that explains its severity, vector, dates and other info.

Spyse Scoring是另一个强大的功能，可以分析目标漏洞。 它比较间谍扫描程序发现的所有信息，并基于0-100的等级显示安全级别。 每个发现的漏洞均带有扩展的详细信息，这些详细信息说明了其严重性，向量，日期和其他信息。

But it significantly improves when used in combination with the Advanced Search, allowing search by CVE IDs and the vulnerability score combining it with other search parameters for fascinating results.

但是，当与“高级搜索”结合使用时，它会显着改善，允许通过CVE ID和漏洞评分进行搜索，并将其与其他搜索参数结合使用，从而获得引人入胜的结果。

![scoring][]

### Spyse是为谁而设计的 **(**Whom Spyse Was Made For**)** ###

Using this search engine pentesters and bug bounty hunters will always remain invisible while seeking vulnerabilities, save money and time for their own scanning infrastructure and avoid the rate limits. It can also be used when other methods are rendered unavailable by contract or bug bounty agreement. Overall, Spyse significantly improves the quality of specialists’ work and provides some new experience solving the daily routine tasks.

使用此搜索引擎，渗透测试者和漏洞赏金猎人在寻找漏洞时将始终不可见，为自己的扫描基础架构节省金钱和时间，并避免速率限制。 当合同或漏洞赏金协议使其他方法不可用时，也可以使用它。 总体而言，Spyse显着提高了专家的工作质量，并提供了一些解决日常任务的新经验。

> 翻译自: [https://www.thecrazyprogrammer.com/2020/05/spyse-cybersecurity-search-engine-for-quick-recon.html][https_www.thecrazyprogrammer.com_2020_05_spyse-cybersecurity-search-engine-for-quick-recon.html]

通信侦察

[eb8abca305563861bbb136726afbd265.png]: /images/20221123/8c37dbc4ef1b40a2ac79c4d074e3f7df.png
[cybersecurity search engine]: https://spyse.com/
[the data you get]: /images/20221123/e6ab8902282c42fd93742930e31feae2.png
[Server map]: /images/20221123/ba0f8b0b22954eb2aea1dc4d658a8c33.png
[API documentation]: https://spyse.com/tools/api
[port scanner]: https://spyse.com/search/port-scanner
[advanced search]: /images/20221123/7e4c1167323a450ebc4a15ecb90dbfb4.png
[scoring]: /images/20221123/a50c38ea232c4205a6e2aee7031ac912.png
[https_www.thecrazyprogrammer.com_2020_05_spyse-cybersecurity-search-engine-for-quick-recon.html]: https://www.thecrazyprogrammer.com/2020/05/spyse-cybersecurity-search-engine-for-quick-recon.html