Exposed Network Service Dorks

SSH servers indexed across the internet. Check for weak passwords and outdated versions.

Telnet services transmit credentials in plaintext. Often found on legacy devices.

Remote Desktop Protocol. Major target for brute-force and BlueKeep (CVE-2019-0708).

VNC remote desktop servers. Many run without authentication or with weak passwords.

FTP servers that may allow anonymous login and file listing.

SMB file sharing. Check for EternalBlue (MS17-010) and open shares.

SNMP with default "public" community string. Exposes device info and network topology.

LDAP directories accessible externally. May expose Active Directory structure.

Network File System exports. May allow unauthorized file access.

PPTP VPN servers with known cryptographic weaknesses.