# Course 35 - Footprinting and Reconnaissance | Episode 3: Exploring Shodan and the Google Hacking Database Page: https://stenobird.com/podcast/cybercode-academy-7578615/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database Text version: https://stenobird.com/podcast/cybercode-academy-7578615/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database.md Podcast: [CyberCode Academy](https://stenobird.com/podcast/cybercode-academy-7578615) Published: 2026-05-24T06:00:02+00:00 Episode link: https://www.spreaker.com/episode/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database--72013130 Audio file: https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72013130/footprinting_with_shodan_and_google_dorking.mp3 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database Duration seconds: 1024 ## Resource In this lesson, you’ll learn about: Shodan and Google Dorking (GHDB) in footprinting1. Shodan (Internet-Wide Device Discovery)🔹 What is Shodan? Shodan A search engine designed to find: Internet-connected devices Exposed services 🔹 What You Can Discover IP addresses Open ports Operating systems Device types (e.g., routers, cameras, servers) 🔹 Example Use Case Searching for: Cisco routers Filtering by: Geographic location 👉 Why it matters: Helps identify: Exposed infrastructure Potential attack surface 2. Key Shodan Capabilities Advanced filters: Location-based searches Service-specific queries Real-world visibility into: Global internet exposure 👉 Insight: Many systems are: Misconfigured Publicly accessible 3. Google Dorking (GHDB)🔹 What is GHDB? Google Hacking Database A collection of: Advanced Google search queries (dorks) 🔹 Purpose Find: Sensitive files Misconfigured web pages Hidden data 4. Common Google Dorking Techniques🔹 File Type Searches Example: .xlsx (Excel files) 👉 Can reveal: Reports Credentials (sometimes) Internal data 🔹 Targeted Queries Use operators like: site: filetype: intitle: 5. Practical Considerations🔹 Handling Limitations Google may: Trigger CAPTCHA (human verification) Requires: Careful, slow searching 🔹 Navigating Results Review multiple pages Refine queries for accuracy 6. Legal & Ethical Use Always: Stay within authorized scope Use tools for: Security research Defensive purposes 👉 Important: These tools are powerful: Misuse can lead to legal consequences Key Takeaways Shodan reveals internet-exposed devices and services GHDB enables precision searching for sensitive data Both tools are critical for OSINT and footprinting Advanced search techniques improve accuracy Ethical usage is mandatory Big PictureThese tools help you:👉 Move from basi… ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/cybercode-academy-7578615/course-35-footprinting-and-reconnaissance-episode-3-exploring-shodan-and-the-google-hacking-database.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.