One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill shodan-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: shodan-api
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/shodan-api
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill shodan-api

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Aggregates Shodan API data to simplify reconnaissance, asset discovery, and security research by fetching host details, banners, and exposed services.

Core Features & Use Cases

  • Host Information: retrieve ip_str, org, os, and open_ports for a target.
  • DNS Resolution & Reverse DNS: resolve hostnames and map IPs to domains.
  • Search & Exposed Data: run queries to locate hosts matching criteria and surface banners for quick assessment.
  • Use Case: profile a target's exposure across internet-facing services to inform risk assessment.

Quick Start

Start by querying the Shodan API for a target IP or hostname to return host data and exposed services.

Frequently Asked Questions about shodan-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query Shodan for host information and exposed services?

To query Shodan for host information, you retrieve ip_str, org, os, and open_ports for a target IP or hostname. This skill fetches host details and banners to support reconnaissance and threat-hunting workflows.

Can I automate DNS resolution and reverse DNS lookups using the Shodan API?

Yes, you can automate DNS resolution and reverse DNS lookups using the Shodan API. This skill accesses dns/resolve and reverse endpoints to map IPs to domains and resolve hostnames for asset discovery.

Do I need an API key to search Shodan for vulnerabilities and banners?

Yes, you need an API key to search Shodan for vulnerabilities and banners. This skill requires an API key and access to host, dns/resolve, reverse, and search endpoints to return structured results for security research.

What is the best way to profile a target's exposure across internet-facing services?

The best way to profile a target's exposure is to run queries to locate hosts matching criteria and surface banners. This skill aggregates Shodan API data to inform risk assessment and vulnerability assessment.

Does Shodan reconnaissance support threat-hunting and asset discovery workflows?

Shodan reconnaissance supports threat-hunting and asset discovery workflows by identifying and enumerating host information and banners. This skill performs API-backed lookups to simplify security research and surface exposed data.