Skip to content

Latest commit

 

History

History
50 lines (38 loc) · 1.79 KB

README.md

File metadata and controls

50 lines (38 loc) · 1.79 KB

shodan-crt.sh 🌐🔍

GitHub GitHub last commit GitHub issues GitHub stars

shodan-crt.sh is a script designed to automate the process of gathering Open Source Intelligence (OSINT) on a particular domain. It extracts subdomains using crt.sh, resolves them to IP addresses, and then queries Shodan for detailed information about these IPs.

🚀 Features

  • Subdomain Extraction: Fetch subdomains from crt.sh.
  • IP Resolution: Resolve each subdomain to its corresponding IP address.
  • Shodan Lookup: Query resolved IPs on Shodan for a detailed security footprint.

📋 Prerequisites

  • jq: Command-line JSON processor.
  • curl: Command-line tool for transferring data with URLs.
  • Shodan CLI: Tool to interact with the Shodan API.

🔑 Shodan API Key Setup

Before using the script, initialize your Shodan CLI with your API key:

shodan init YOUR_API_KEY

Replace YOUR_API_KEY with your actual Shodan API key. Get your API key from your Shodan account.

🛠️ Installation

Clone the repository and make the script executable:

git clone https://github.com/your-username/shodan-crt.sh.git
cd shodan-crt.sh
chmod +x shodan-crt.sh

📝 Usage

Run the script by passing the target domain as an argument:

./shodan-crt.sh <domain>

For example:

./shodan-crt.sh example.com

⚙️ Customization

The script can be easily customized to fit more specific OSINT requirements or workflows.