[Ranssi]

Hey guys, just dropping some FOFA dorks that might come in handy for OSINT, finding exposed services, and spotting potentially vulnerable infrastructure.

Elasticsearch

domain="example.com" && port="9200"

Apache

domain="example.com" && server="Apache"

Nginx

domain="example.com" && product="NGINX"

Microsoft Exchange

domain="example.com" && app="Microsoft-Exchange"

Redis

domain="example.com" && port="6379"

Admin Panels

domain="example.com" && title="Admin"

RDP

domain="example.com" && port="3389"

Roundcube Webmail

domain="example.com" && product="Roundcube-Webmail"

HTTP Services

domain="example.com" && protocol="http"

These are useful starting points for checking exposed assets and identifying technologies that might be affected by known CVEs.

Just keep in mind that an exposed service doesn't necessarily mean it's vulnerable. Always verify versions and cross-check with CVE databases.

Hope you find these useful, bros!