Hello, everyone! Welcome to Pluralsight and this course, Reconnaissance
with Shodan. In this Red Team Tools course, you'll learn how to gather
information about potential targets using Shodan. In the reconnaissance
phase, red teams collect detailed and relevant information about
specific targets to plan a variety of attacks from first exploitation
through lateral movement and even social engineering and physical
attacks.
Reconnaissance is the first step in a red team engagement.
Shodan is a proprietary search engine that is actively gathering
information about devices connected to the internet, often
referred to as the Internet of Things.
Shodan is a valuable tool in reconnaissance because it maintains current
information on almost every accessible device on the internet.
We will start this course by learning more about the capabilities of Shodan
to enable us to find connected devices with IP addresses,
open network ports, software versions and configuration details,
digital certificate information, and a list of potential vulnerabilities.
We will also look at using Shodan from a red team project
perspective, where we will focus on a specific organization and
their connected devices and locations.
As Shodan does the active exploration for us,
we are utilizing the information collected in a passive manner.
The target will have no indication of our activities.
Whether you're trying to gather open source intelligence as part of a
red team engagement or want to discover and protect your
organization's connected devices from attackers,
join me in learning more about performing
reconnaissance with Shodan, here at Pluralsight.