Skip to content
Nuclei Templates

Shodan API Test

ID: api-shodan

Severity: info

Author: 0ri2N

Tags: recon,shodan,token-spray

Description

Section titled “Description”

Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters.

YAML Source

Section titled “YAML Source”
id: api-shodan


info:
  name: Shodan API Test
  author: 0ri2N
  severity: info
  description: |
    Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters.
  reference:
    - https://shodan.io
    - https://developer.shodan.io
    - https://developer.shodan.io/api
  metadata:
    max-request: 1
  tags: recon,shodan,token-spray


self-contained: true


http:
  - method: GET
    path:
      - https://api.shodan.io/api-info?key={{token}}


    matchers:
      - type: word
        part: body
        words:
          - '"plan"'
          - '"unlocked"'
          - '"scan_credits"'
        condition: and
# digest: 4a0a00473045022100d26ff386d852df77df1b3c25ae13df4546d68fa8bb44c3501419c11a303d7384022001dc102ea79dfc8ad415651ac44b67fa04edd9606194c4dc2845992d0d0edfe2:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/token-spray/api-shodan.yaml"

View on Github