Agent skill · security · davila7
Shodan Reconnaissance and Pentesting
This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports." It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance.
Why this skill is useful
Adds executable scripts for using Shodan's CLI and API to perform reconnaissance and vulnerability assessments that the AI wouldn't generate on its own.
What it needs
Requires shodan installed locally. Requires shodan account access. About 7k tokens when loaded. Last updated 2026-08-06. 30,138 stars on the source repository.
What this skill does
Shodan Reconnaissance and Pentesting Purpose Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements. This skill covers the Shodan web interface, command-line interface (CLI), REST API, search filters, on-demand scanning, and network monitoring capabilities for discovering exposed services, vulnerable systems, and IoT devices. Inputs / Prerequisites Shodan Account: Free or paid account at shodan.io API Key: Obtained from Shodan account dashboard Target Information: IP addresses, domains, or network ranges to investigate Shodan CLI: Python-based command-line tool installed Authorization: Written permission for reconnaissance on target networks Outputs / Deliverables Asset Inventory: List of discovered hosts, ports, and services Vulnerability Report: Identified CVEs and exposed vulnerable services Banner Data: Service banners revealing software versions Network Mapping: Geographic and organizational distribution of assets Screenshot Gallery: Visual reconnaissance of exposed interfaces Exported Data: JSON/CSV files for further analysis Core Workflow 1. Setup and Configuration Install Shodan CLI Initialize API Key Check Account Status 2. Basic Host Reconnaissance Query Single Host Check if Host is Honeypot 3. Search Queries Basic Search (Free) Filtered Search (1 Credit) Count Results Download Results Parse Downloaded Data 4. Search Filters Reference Network Filters Geographic Filters Organization Filters Service/Product Filters Vulnerability Filters Screenshot Filters 5. On-Demand Scanning Submit Scan Monitor Scan Status Available Scan Protocols 6. Statistics and Analysis Get Search Statistics 7. Network Monitoring Setup Alerts (Web Interface) 8. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills davila7/shodan-reconnaissance