What is the Shodan Reconnaissance skill?

It is a specialized capability for Claude Code that provides methodologies, CLI commands, and API patterns for using Shodan to find and analyze exposed internet devices.

Can this skill help find specific CVEs?

Yes, it includes specialized filters to search for hosts specifically vulnerable to certain CVEs, such as BlueKeep or Log4j.

Is active scanning supported?

Yes, the skill provides workflows for on-demand scanning of specific IP addresses to get the most current data available from Shodan's crawlers.

Do I need a Shodan API key to use this skill?

Yes, a Shodan account and API key are required to initialize the CLI and perform most search, scan, and monitoring operations.

Does using this skill cost Shodan credits?

Basic searches are often free, but advanced filters, data downloads, and on-demand scans consume Shodan query or scan credits based on your plan.

Shodan Reconnaissance & Pentesting

Name: Shodan Reconnaissance & Pentesting
Author: claudiodearaujo

byclaudiodearaujo

•

Security & Testing

Automates network reconnaissance and vulnerability discovery using Shodan to identify exposed internet-connected devices and services.

This skill provides a comprehensive framework for leveraging Shodan's search engine, CLI, and API to conduct thorough reconnaissance during security audits or penetration testing engagements. It empowers users to map attack surfaces, identify misconfigured IoT devices, detect vulnerable software versions via CVE filters, and monitor network assets for unauthorized exposure. By streamlining the process of gathering intelligence from the 'search engine for the internet,' this skill helps security professionals efficiently transform raw banner data into actionable vulnerability reports.

Key Features

01Advanced search filtering for specific products, versions, and CVEs

021 GitHub stars

03Automated host and port discovery via Shodan CLI integration

04On-demand IP scanning and honeypot probability detection

05Network asset monitoring and real-time alert configuration

06Data export and parsing to JSON/CSV for professional security reporting

Use Cases

01Identifying IoT devices with default credentials or known vulnerabilities

02Performing external attack surface management for corporate infrastructure

03Mapping the geographic distribution of specific software deployments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro shodan-reconnaissance

For use in Claude.ai and ChatGPT

Download Skill