Just as common as dorking for common webshells with no or default passwords.
If you need a VPS fast googling for c99 is faster than spinning up something on AWS ;)
Hmm... looks like this dropped from 20k to 700 while I wasn't looking, which I guess is a very good thing (these are DVRs!). But FWIW, for "JAWS/1.0 -2017 -2016" on shodan, then "/shell?whoami" returns "root". :)
> Please check back again shortly. We apologize for the inconvenience.
> Please direct any questions to nvd@nist.gov. Thank you."
Perfect timing for hn Frontpage. Alt link: https://tomcat.apache.org/security-7.html