---
name: dokhacgiakhoa/Shodan Reconnaissance and Pentesting
source: https://app.decimal.ai/s/dokhacgiakhoa-shodan-reconnaissance-and-pentesting@1/SKILL.md
source_sha256: 470a4bd95785
---

# Shodan Reconnaissance and Pentesting

## Purpose

Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements. This skill covers the Shodan web interface, command-line interface (CLI), REST API, search filters, on-demand scanning, and network monitoring capabilities for discovering exposed services, vulnerable systems, and IoT devices.

## Inputs / Prerequisites

- **Shodan Account**: Free or paid account at shodan.io
- **API Key**: Obtained from Shodan account dashboard
- **Target Information**: IP addresses, domains, or network ranges to investigate
- **Shodan CLI**: Python-based command-line tool installed
- **Authorization**: Written permission for reconnaissance on target networks

## Outputs / Deliverables

- **Asset Inventory**: List of discovered hosts, ports, and services
- **Vulnerability Report**: Identified CVEs and exposed vulnerable services
- **Banner Data**: Service banners revealing software versions
- **Network Mapping**: Geographic and organizational distribution of assets
- **Screenshot Gallery**: Visual reconnaissance of exposed interfaces
- **Exported Data**: JSON/CSV files for further analysis

## Core Workflow

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [1. Setup and Configuration](./sub-skills/1-setup-and-configuration.md)
### 2. [2. Basic Host Reconnaissance](./sub-skills/2-basic-host-reconnaissance.md)
### 3. [3. Search Queries](./sub-skills/3-search-queries.md)
### 4. [4. Search Filters Reference](./sub-skills/4-search-filters-reference.md)
### 5. [5. On-Demand Scanning](./sub-skills/5-on-demand-scanning.md)
### 6. [6. Statistics and Analysis](./sub-skills/6-statistics-and-analysis.md)
### 7. [7. Network Monitoring](./sub-skills/7-network-monitoring.md)
### 8. [8. REST API Usage](./sub-skills/8-rest-api-usage.md)
### 9. [Essential CLI Commands](./sub-skills/essential-cli-commands.md)
### 10. [Common Search Queries](./sub-skills/common-search-queries.md)
### 11. [Useful Filter Combinations](./sub-skills/useful-filter-combinations.md)
### 12. [Credit System](./sub-skills/credit-system.md)
### 13. [Operational Boundaries](./sub-skills/operational-boundaries.md)
### 14. [Data Freshness](./sub-skills/data-freshness.md)
### 15. [Legal Requirements](./sub-skills/legal-requirements.md)
### 16. [Example 1: Organization Reconnaissance](./sub-skills/example-1-organization-reconnaissance.md)
### 17. [Example 2: Vulnerable Service Discovery](./sub-skills/example-2-vulnerable-service-discovery.md)
### 18. [Example 3: IoT Device Discovery](./sub-skills/example-3-iot-device-discovery.md)
### 19. [Example 4: SSL/TLS Certificate Analysis](./sub-skills/example-4-ssltls-certificate-analysis.md)
### 20. [Example 5: Python Automation Script](./sub-skills/example-5-python-automation-script.md)
### 21. [Example 6: Network Range Assessment](./sub-skills/example-6-network-range-assessment.md)