Shodan Reconnaissance Skill

Query Shodan for exposed services, target enrichment, and attack surface discovery.

Parse the user's input to determine the action:

• $shodan search "org:Acme port:443" → run a Shodan search query
• $shodan target 203.0.113.1 → enrich a specific IP
• $shodan target example.com → enrich a domain (DNS + per-IP lookup)
• $shodan dorking "Acme Corp" → build advanced Shodan dorks for a target
• $shodan monitor "Acme Corp" → exposure report for an organization
• $shodan cve CVE-2024-3400 → find hosts vulnerable to a specific CVE
• $shodan cve CVE-2024-3400 "Acme Corp" → CVE search scoped to an org

Prerequisites