VulnScanners Logo

Recon & OSINT

Shodan CLI

Query the internet's connected devices from the terminal.

osintrecon
shodan cli — terminal
$ shodan search 'org:"Example Inc"'

What it does

The Shodan CLI searches Shodan's index of internet-connected hosts for open ports, banners, and known exposures. It gathers external intel without you sending a single packet.

Common use cases

  • •Find all internet-facing hosts for a target organization by searching Shodan's index.
  • •Identify exposed industrial control systems and unsecured databases on the public internet.
  • •Check for known vulnerable services like open RDP, Telnet, or SMB across an IP range.

Key features

  • •Searches Shodan's full device database without sending network probes.
  • •Filters by organization, port, service, product, and geographic location.
  • •Downloads full host results as JSON for offline analysis.
  • •Works entirely through the Shodan API — no scanning infrastructure needed.

Source

https://cli.shodan.io/ ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.dnsxFast, multi-purpose DNS toolkit for resolution and probing.theHarvesterEmail, subdomain, and host OSINT gathering.

Need hosted scanning instead of local tooling?

Run a scan in the browser →