# shodan-reconnaissance

Guides Claude Code through network reconnaissance using Shodan CLI and API. Helpful for discovering exposed internet hosts, open ports, and known service vulnerabilities.

- skill · `type=skill` · Claude Code · 86 installs
- Author: zebbern
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/shodan-reconnaissance
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/shodan-reconnaissance

## What it does

This skill directs Claude Code on structuring reconnaissance workflows with the Shodan search engine. It details syntax for querying individual target IP addresses, inspecting banners, and evaluating hosts with the honeyscore check. Structured CLI commands show how to pull filtered records by country, organization, or port, and save exports as JSON or CSV files.

The instructions also outline on-demand scans via `shodan scan submit` alongside direct REST API endpoints. You must configure an API key through `shodan init` beforehand, or the commands will fail. Several search filters and scan operations also deduct account credits.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill security/shodan-reconnaissance
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill shodan-reconnaissance -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/shodan-reconnaissance/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/shodan-reconnaissance/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/shodan-reconnaissance/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/shodan-reconnaissance/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates shodan-reconnaissance
```

2. **Manually: put the files in place**
- File: `.github/skills/shodan-reconnaissance/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/shodan-reconnaissance
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/shodan-reconnaissance/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/shodan-reconnaissance

## When to use it
- inventory open network ports and services across target IPs
- identify internet-facing hosts affected by specific CVEs
- export Shodan search query results into JSON or CSV files
- verify whether a target host behaves as a honeypot

## Example prompts
- Inspect IP 1.1.1.1 with Shodan and list open network ports
- Gather statistics on nginx installations in New York using the Shodan CLI
- Submit host 192.168.1.100 for scanning and store output in `scan_results.json.gz`

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 804 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md