OSINT
Shodan
Search engine for internet-connected devices and services.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Finding exposed services related to in-scope assets (authorized use).
How
Query by org, SSL cert, product, CVE; use CLI for scripting.
Why
Reveals internet exposure without sending packets to the target first.
Commands & usage
shodan search 'org:"Example Corp"'
shodan host 1.2.3.4
shodan domain example.com
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Recipes
Tags
Related in OSINT
Maltego
Graph-based link analysis for people, domains, infrastructure, and relationships.
theHarvester
Gathers emails, subdomains, hosts, and employee names from public sources.
Recon-ng
Modular recon framework with workspace DB and API-backed modules.
SpiderFoot
Automated OSINT scanner with web UI covering 200+ data sources.
Sherlock
Hunt usernames across hundreds of social sites.
Maigret
Username OSINT tool with report generation across many sites.