$ man shodan
Shodan
A search engine for internet-connected devices. Your servers are probably already in it.
osint / reconpassive / local only
⚠ Recon your own assets, or targets you have written permission to test. Passive OSINT reads public data, but using it to target someone else's systems can still be illegal or against their terms. Examples on this site use example.com placeholders.
## why a developer should care
Shodan scans the whole internet continuously. Open ports, banners, versions and certificates for your IPs are already indexed - an attacker just searches.
## install
$ pip install shodan && shodan init YOUR_API_KEYOther platforms and pre-built binaries: official install guide ↗
Check it worked: open a new terminal and run shodan -h. "command not found" means it isn't installed or isn't on your PATH yet.
## shortcuts
# Everything Shodan has indexed for your hostnames
$ shodan search hostname:{{target}}# DNS info Shodan knows about the domain
$ shodan domain {{target}}