shodan

Name: shodan
Availability: InStock
Author: Dave

Discover internet-exposed hosts and services using the Shodan CLI.

15|1|Updated Feb 12, 2026

Search Tags:#reconnaissance #network security #asset discovery #vulnerability scanning #osint #shodan

Ready to run

npx skills add https://github.com/AeonDave/malskill --skill shodan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: shodan
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/recon/shodan
Command: npx skills add https://github.com/AeonDave/malskill --skill shodan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify internet-exposed hosts and services by leveraging the Shodan search engine, enabling passive reconnaissance without directly interacting with targets.

Core Features & Use Cases

Passive Discovery: Find internet-wide hosts and services without touching the target.
Targeted Queries: Search for specific banners, CVEs, organizations, or IP ranges.
Infrastructure Enumeration: Understand an organization's external attack surface.
Use Case: Identify all devices within a specific organization that are running an outdated version of Apache to assess potential vulnerabilities.

Quick Start

Use the shodan skill to search for hosts running Apache version 2.4.49.

Frequently Asked Questions about shodan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find internet-exposed assets for a specific organization?▼

You can find internet-exposed assets by using Shodan to perform passive internet-wide host and service discovery. This allows you to enumerate an organization's external infrastructure without directly interacting with the target network.

What is passive reconnaissance and how does it work for network security?▼

Passive reconnaissance identifies internet-wide hosts and services using the Shodan search engine. It works by querying a pre-existing database of banners and IP addresses, enabling asset discovery without touching the target network.

Can I search for specific CVEs or outdated software versions using Shodan?▼

Yes, you can search for specific CVEs or outdated software versions using Shodan. The CLI supports targeted queries with various search filters to pinpoint hosts running vulnerable services like an outdated Apache version.

Do I need an API key to use Shodan for asset discovery?▼

Yes, you need a Shodan API key to perform asset discovery. The Skill utilizes the Shodan CLI and requires this API key for operation to execute precise queries and retrieve infrastructure data.

What are the limitations of using Shodan for vulnerability scanning?▼

Shodan's limitation is that it performs passive reconnaissance rather than active vulnerability scanning. It identifies internet-exposed infrastructure and banners based on historical data, meaning it does not probe for real-time vulnerabilities directly.