跳到正文
cccskills
免费在 GitHub 公开

shodan-api

Shodan API reference. Host reconnaissance, port scanning, and vulnerability data.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills
查看安装方法

包含的文件（1）

  • SKILL.md1.9 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Shodan API

Base URL

https://api.shodan.io

Authentication

Query parameter: ?key=$SHODAN_API_KEY

Rate Limits

  • Free: 1 request/second, 100 results/search
  • Paid: Higher limits and more features

Key Endpoints

Host Information

curl -s "https://api.shodan.io/shodan/host/{ip}?key=$SHODAN_API_KEY"

Useful fields:

  • ip_str — IP address
  • ports — open ports
  • data[] — service banners per port (product, version, transport)
  • os — detected OS
  • hostnames — reverse DNS
  • vulns — CVE list (paid feature)
  • org — organisation
  • isp — ISP
  • country_code — country
  • last_update — last scan date

DNS Resolution

curl -s "https://api.shodan.io/dns/resolve?hostnames={domain}&key=$SHODAN_API_KEY"

Reverse DNS

curl -s "https://api.shodan.io/dns/reverse?ips={ip}&key=$SHODAN_API_KEY"

Search

curl -s "https://api.shodan.io/shodan/host/search?query={query}&key=$SHODAN_API_KEY"

Search filters: port:, org:, country:, product:, version:, ssl.cert.subject.cn:, http.title:, vuln:

API Info (check credits)

curl -s "https://api.shodan.io/api-info?key=$SHODAN_API_KEY"

Common Queries

  • ssl.cert.subject.cn:example.com — find hosts with specific SSL certificate
  • org:"Target Org" — find hosts belonging to an org
  • product:"Apache" port:443 country:RU — specific service in a country
  • vuln:CVE-2024-12345 — hosts vulnerable to specific CVE (paid)

Response Summary Format

ip: <IP>
hostnames: [<list>]
org: <organisation>
isp: <ISP>
country: <country>
os: <operating system>
open_ports: [<port list>]
services:
  - port: 80
    product: nginx
    version: 1.18.0
vulnerabilities: [<CVE list>]  # paid only
last_update: <date>

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护，适用 Google 的隐私权政策和服务条款。

同一仓库的技能

abuseipdb-api

免费

AbuseIPDB API reference. IP reputation and abuse report lookups.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

ach

免费

Analysis of Competing Hypotheses — structured technique for evaluating multiple explanations against evidence. Use when facing ambiguous attribution or multiple plausible scenarios. Prefers graded evidence items from /quality-of-information-check and runs that skill first when handed raw URLs or text. Runs on ungraded evidence when asked, labelled as such, unweighted, and capped at Moderate confidence.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

campaign-tracking

免费

Use when documenting a named campaign across time and victims, the user asks to start or update a campaign record, or another skill identified a multi-incident cluster that warrants formal tracking. Provides the template (timeline, attribution, victimology, attack chain, Diamond Model mapping, IOC clusters) and the lifecycle from active to historical.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

carding-financial-fraud

免费

Use when the user asks about carding, BIN attacks, payment-card breach markets, fullz/CVV2 trade, autoshops (BidenCash, Brian's Club, Russianmarket, B1ack's Stash), or financial-fraud TTPs. Self-updating knowledge cell.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

censys-api

免费

Censys API v2 reference. Host reconnaissance and certificate data.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

china-cyber-espionage

免费

Use when the user asks about Chinese state-sponsored cyber operations or specific PRC-aligned actors (APT41, Volt Typhoon, Mustang Panda, APT10, APT31, Salt Typhoon, etc.), MSS/PLA-attributed campaigns, or PRC sector targeting. Self-updating knowledge cell.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

查看 Liberty91LTD 的全部技能

报告此技能的问题