Discover internet-exposed hosts and services using the Shodan CLI.
npx skills add https://github.com/AeonDave/malskill --skill shodan
Please help me install this Agent Skill. Skill: shodan Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/recon/shodan Command: npx skills add https://github.com/AeonDave/malskill --skill shodan
This Skill helps identify internet-exposed hosts and services by leveraging the Shodan search engine, enabling passive reconnaissance without directly interacting with targets.
Use the shodan skill to search for hosts running Apache version 2.4.49.
High-intent search queries and answers about installing and using this skill.
You can find internet-exposed assets by using Shodan to perform passive internet-wide host and service discovery. This allows you to enumerate an organization's external infrastructure without directly interacting with the target network.
Passive reconnaissance identifies internet-wide hosts and services using the Shodan search engine. It works by querying a pre-existing database of banners and IP addresses, enabling asset discovery without touching the target network.
Yes, you can search for specific CVEs or outdated software versions using Shodan. The CLI supports targeted queries with various search filters to pinpoint hosts running vulnerable services like an outdated Apache version.
Yes, you need a Shodan API key to perform asset discovery. The Skill utilizes the Shodan CLI and requires this API key for operation to execute precise queries and retrieve infrastructure data.
Shodan's limitation is that it performs passive reconnaissance rather than active vulnerability scanning. It identifies internet-exposed infrastructure and banners based on historical data, meaning it does not probe for real-time vulnerabilities directly.
SynthFlowAIConfigure a Synthflow API key in .env and validate it with curl.
dapperdiversDiscovers Internet-facing assets and vulnerabilities via Shodan queries.
BrownFineSecurityIdentify open ports and enumerate network services with Nmap.
safzanpiraniDiscover and classify public Ollama and ComfyUI instances via Shodan.
