Is it possible to scan my own IP ranges using this skill?

Absolutely. The skill provides commands for CIDR-based network range searches and on-demand scanning to help map your own infrastructure.

Does this skill require a Shodan account?

Yes, you need a free or paid Shodan account and a valid API key to perform searches, scans, and host lookups using this skill.

Does using Shodan consume credits?

Basic searches are often free, but filtered queries, large data downloads, and on-demand scans consume Shodan Query or Scan credits depending on your subscription plan.

Can Claude automate the parsing of Shodan results?

Yes, this skill includes workflows to parse Shodan JSON results into CSV, summary reports, or asset inventories directly within your environment.

Can I use this skill to find specific vulnerabilities like CVEs?

Yes, the skill includes specific filters for CVE IDs and 'has_vuln' flags to help you identify systems with known security flaws.

Shodan Reconnaissance and Pentesting

Name: Shodan Reconnaissance and Pentesting
Author: zebbern

byzebbern

•

2,883

•

安全与测试

Leverages the Shodan search engine to identify exposed devices, vulnerable services, and IoT infrastructure during security assessments.

This skill equips Claude with systematic methodologies for utilizing Shodan’s web interface, CLI, and API to perform deep reconnaissance. It enables security professionals to discover exposed ports, identify service banners for software versioning, map geographic asset distribution, and detect known vulnerabilities (CVEs) across target networks. Whether conducting an initial attack surface analysis or monitoring for leaked credentials and open databases, this skill provides the precise search filters and commands needed to extract actionable intelligence from the internet's most powerful IoT search engine.

主要功能

01Python integration scripts for automating reconnaissance data collection

022,883 GitHub stars

03Automated vulnerability discovery and CVE detection for internet-facing assets

04Advanced search filters for targeting specific organizations, geolocations, and service types

05On-demand scanning and monitoring workflows for real-time asset tracking

06Comprehensive Shodan CLI command library for host and network analysis

使用场景

01Identifying exposed industrial control systems (ICS) or insecure IoT devices

02Performing external attack surface management (EASM) for an organization

03Auditing infrastructure for specific software vulnerabilities like Log4j or BlueKeep

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zebbern/claude-code-guide shodan-reconnaissance

For use in Claude.ai and ChatGPT

Download Skill