Shodan is a commercial service funded through various paid plans.
Based on the plan you select, additional access to
Shodan data and capabilities are granted.
These include the number of monthly credits for query and
scan, the number of monitored IP addresses,
the available search filters,
batch lookups for IP addresses, and enterprise‑specific capabilities.
The various levels include a basic membership level with a one‑time fee,
freelancer, small business, and corporate levels have monthly fees.
The enterprise level has access to all Shodan data and capabilities.
Official documentation is available either through the Complete
Guide to Shodan by the creator of Shodan for $5 on LeanPub, or on
the Shodan website. As I showed in a demo,
there's a site for the Shodan command‑line tool setup and use, and there's
also a site for useful snippets for the command line.
Other capabilities include network monitoring for an
organization's network ranges,
maps that show geo‑location information on search findings, honeypot detection,
exploit search, and web browser plugins.
There are also reconnaissance and resource development tools that
use the Shodan API to expand their capabilities.
These include theHarvester, Spiderfoot, Maltego, and Recon‑ng.
Pluralsight has Red Team Tools courses for most of these tools.
If you're an organization concerned about the reach of Shodan
and the information it has on your devices,
what should you do?
Well, start with reducing your attack surface. Remove
anything on your perimeter that isn't needed.
Do a better job of managing the remaining systems. And scan your
network ranges to identify and remediate issues.
You should also limit access with VPNs to protect systems and data
that need to be accessible to your employees and partners. And use
firewalls and other network access control methods to protect and
monitor those accessible systems.
That's all for this course.
But remember that Shodan has a wealth of information and
other capabilities waiting to be explored.
I hope you enjoy the demonstrations of Shodan and can put
that information to good use in your work.
Thank you for watching.
I'm Keith Watson, and I look forward to learning with you on the next course!