Showdown is a search engine over the Internet for finding connected devices.
If a device is directly hooked up to the Internet, then Shodan queries it for various publicly available
information.
So it scans the entire IP version for network.
And parses the results using the better information.
The types of devices that are indexed can vary tremendously, ranging from small desktops right up through
nuclear power plants and just about everything in between.
Some describe it as a search engine for hackers.
Now, Shodan is integrated with MSF, so you can query Shodan from MSF.
However, to accomplish this, the first step is to get an API key by registering with Shodan.
Then you can you should end from MSF console.
So I'll set up a search for a showdown just like that.
OK, so there are only three auxiliaries for Shodan.
And I'll use the showdown search module.
OK, so now show the options.
And these are the options, and as you can see here, you don't have classic variables such as our host
and Arpad.
But there is an important variable here.
It is Shodan APIC.
Now you must have an API key to perform searches on showdown.
So how about if I show you the showdown interface and copy my API key to use?
So go to your Web browser and just type showed in in the address bar.
And of course, the first row of the result list is what you're going to look for, Shodan Dot Io.
Now, I suggest strongly that you explore the Web site and create an account because you were going
to get to love Shodan.
So now I'm going to log in.
This is my account's homepage.
And in the upper right hand corner, there is a button and it's called Show APIC.
So let's click on that and here is my APIC.
You can get one for yourself in exactly the same way.
But what I'm going to do is I'll copy it and I'll use it in my MSF console, then go back to MSF console.
All righty, so now.
I set the showdown API key variable to the copied key.
And let's write a query to the query variable.
Let's look for my admin pages.
Now, wouldn't you love to have some search filters here, but I can't at this point because I don't
use the paid service.
So I'll just make a simple search.
And let me check one more time just to make sure everything's right.
OK, now you can run the module.
Now, sometimes it takes a while, but I don't think it's not working.
So here are the results.
And let's randomly choose an IP.
So I'm going to copy this and open it from the browser.
And this is your imaginary targets page.
Now, what I want to do here is, yeah, you can look for Internet connected services that your target's
connected to besides a keyword search.
Showdown allows you to be specific in your search.
So what does that mean?
You can, for instance, find devices by city, country or IP address or IP address range using C IDR
notation so we can get even more specific, providing it with GPS coordinates, hostname operating system
and port.
So I've made a random search, but you can also make a detailed one.