Introduction
Ditecting (Chinese Pinyin:diting, ditecing is spoonerism) is a sacred animal of Kṣitigarbha (the supreme ruler of hell realm in Buddhism) of Han Buddhism. In Han Buddhism and Chinese mythology, "谛听" can detect everything in the world, especially living beings' minds.
It is said that "谛听" is the animal Kṣitigarbha rides, and "谛听"'s prototype is a white dog. Due to Kṣitigarbha sect's doctrine based on filial piety, and dogs have loyal temper, like Manjushri's lion represent transcendent wisdom, and Samantabhadra's white elephant repesent practice and meditation, Kṣitigarbha's "谛听" reperents loyalty in Han Buddhism.
Dr. Yu Yao, who is professor of school of computer science and engineering of Northeastern University (CN), organized his students developed -- Ditecting Cyberspace Search Engine of Industrial Control System Devices (ICS), named from "谛听", whose name have a meaning of detecting everything, aiming to detect exposed ICS devices in the cyberspace, help cybersecurity enterprises with maintaining ICS devices, and trace malicious persons.
You can locate ICS devices, find exposed ports and cybersecurity vulnerabilities by ditecting. You can intuitively aware global ICS cybersecurity situations, and concentrate on ICS issues around you by ditecting. Ditecting aims to offer an open and free ICS research environment, using ditecting adeptly, focusing on ICS cybersecurity, and we can boosting the development of ICS cybersecurity.
Instructions and Tips
Basic query syntax: "query type:keyword" (exclude "")；
When you query multiple keywords or types，separating by character "&"， every keyworks' logical relationship in the same query type are OR, every keyworks' logical relationship in different query types are AND;
Keywords are case-insensitive.
Query based on ICS protocols
Query based on ICS protocols directly. The syntax is service:protocols' name
for example: explore ICS servers' IP and other information in the world, which are using modbus: service:modbus
Query based on ports
Query based on certain ICS protocols' default ports, The syntax is port:certain port number
for example: explore ICS devices' IP and other information in the world, which are using modbus: port:502
Query based on IP address
Query beaed on given IP, and fuzzy qurey is supported. The syntax is IP:IP address
for example: query a device whose IP address is 225.225.225.0: IP:225.225.225.0
Qurey devices within IP blocks 225.225.*: IP:225.225.*
Query based on scan time
Query based on scan time，and query results' scanning time are after the time which is typed in. The syntax is time:time
for example: explore the results whose scan time are after September, 2015: time:2015.9
Query based on locations
Query based on locations, and query types inluding country(counrties or regions)、 area(regions)、regname(provinces/states)、city(cities)
country： query by countries' name，using the simplest, complete and common countries' name
regname： query by state/province: query basing on some province or district [defunct temporarily]
for example: regname:North Denmark, Aalborg
city:cities's name [defunct temporarily]
for example: city:Shenyang
Query basing on keywords
Query beaed on given IP, and fuzzy qurey is supported. The syntax is keyword:keywords
for example: explore devices produced by Siemens or related to Siemens： keyword:Siemens
Integrated query
Combining query types, you can get precise information
for example: explore servers in US which are produced by Siemens and using port 502： country:US&port:502&keyword:Siemens