Show Menu
Cheatography
  1. Home >
  2. Programming >

Shodan.io Cheat Sheet (DRAFT) by

This is a cheat-sheet for the general usage of the Shodan CLI tool, a search engine for devices connected to the internet.

This is a draft cheat sheet. It is a work in progress and is not finished yet.

Common Commands

search
Searches Shodan and outputs results in a termin­al-­fri­endly manner
count
Returns the number of results for a search query
stats
Shows statistics using specified facets through a search query
version
Outputs the version of Shodan that is installed
host [ip]
Shows more inform­ation about the given host
myip
Shows your own IP address
download*
Downloads the results in JSON format
parse
Allows you to parse a JSON download
domain
Shows more inform­ation about the domain
*Only downloads the first 1000 results by default.

Common Flags

--limit
Limits the number of results
--fields
Comma-­sep­arated list of desired fields
--sepa­rator
Specifies the separator between fields
--facets
Used with stats command; comma-­sep­arated list of facets

Common Search Fields

ip_str
The IP address of the banner
asn
The ASN or "­blo­ck" of IP addresses the banner belongs to
net
Specifies the network the banner belongs to
port
The port number of the banner
org
The organi­zation logged in the banner
hostname
Hostname for the banner
os
The operating system
country
The country of the banner
city
The city of the banner

Common Facets

port
Sorts results by port number
org
Sorts results by organi­zation
city
Sorts results by city
country
Sorts results by country
ip
Sorts results by IP address
domain
Sorts results by domain name
os
Sorts results by OS
state
Sorts results by state
 

Example Commands

shodan search --fields ip_str­,po­rt,­org­,ho­stnames microsoft iis 6.0
Displays results with the given columns for "­mic­rosoft iis 6.0"
shodan host 144.75­6.3­24.535
Displays inform­ation about the host
shodan count microsoft iis 6.0
Outputs the number of results
shodan download Data microsoft iis 6.0
Downloads results to a JSON file named "­Dat­a"
shodan parse --fields ip_str­,po­rt,org --sepa­rator , Data.j­son.gz
Analyzes the JSON file and outputs the columns with a comma as the separator
domain google.com
Shows inform­ation about the domain
shodan search --limit 100 hostna­me:­my_­com­puter
Searches for endpoints with the hostname "­my_­com­put­er" and restricts to 100 results
shodan stats --facets port net:19­8.20/16
Searches for devices on the network and sorts results by port number

Common Shodan.io Website Search Filters

ip
asn
country
hostname
port
os
version
tag*
vuln*
Without any filters, Shodan.io only searches the data portion of a banner.
*requires premium Shodan subscr­iption