WEBVTT

00:00:00.940 --> 00:00:04.740
We start with a demonstration of the Shodan website. First,

00:00:04.750 --> 00:00:08.250
we'll access the website at shodan.io.

00:00:08.740 --> 00:00:11.380
Then, we'll walk through some of the key features of the site,

00:00:11.390 --> 00:00:15.460
including the help documentation, account registration,

00:00:15.840 --> 00:00:20.460
login to the site, search, and an image search feature.

00:00:21.040 --> 00:00:23.760
I'll conduct the series of demonstrations on the current version

00:00:23.760 --> 00:00:27.150
of Kali Linux because Kali includes the Shodan command‑line

00:00:27.150 --> 00:00:31.460
client. Here is the main page for Shodan.

00:00:31.840 --> 00:00:34.450
You can see there's a simple search box at the top.

00:00:35.440 --> 00:00:38.350
Before we start searching, let's highlight some key features.

00:00:39.340 --> 00:00:43.260
The first place I like to go for any new tool is the documentation.

00:00:44.140 --> 00:00:48.930
Shodan includes some good help resources. Here you'll find

00:00:48.940 --> 00:00:51.160
some great information on using Shodan.

00:00:52.140 --> 00:00:56.250
In addition to this course, you may also find this set of documentation helpful.

00:00:57.740 --> 00:01:00.060
You should consider a registered account to get

00:01:00.060 --> 00:01:02.110
access to more Shodan capabilities.

00:01:02.540 --> 00:01:03.470
Without an account,

00:01:03.480 --> 00:01:05.690
you're limited to a small number of plain text

00:01:05.690 --> 00:01:09.510
searches. After you register your account,

00:01:09.700 --> 00:01:12.060
you should consider joining at the membership level.

00:01:13.040 --> 00:01:17.450
It has a $49 one‑time fee, but it's for the lifetime of the account.

00:01:18.440 --> 00:01:22.190
Sometimes during the year you can find that fee as low as $1.

00:01:22.190 --> 00:01:25.650
Membership is also free for higher education users.

00:01:27.140 --> 00:01:29.450
Let's log into the site from the main page.

00:01:29.840 --> 00:01:31.230
If you login from there,

00:01:31.470 --> 00:01:33.330
you are presented with a dashboard of helpful

00:01:33.330 --> 00:01:35.150
information, what you'll want to explore.

00:01:36.640 --> 00:01:39.890
Now we can begin our searching. Enter your search

00:01:39.890 --> 00:01:42.150
terms and filters in the search box.

00:01:43.640 --> 00:01:45.950
You can immediately see results of the search.

00:01:47.340 --> 00:01:52.190
One other interesting capability of Shodan is the images feature.

00:01:52.190 --> 00:01:56.970
As Shodan searches, it captures screenshots and images from

00:01:56.970 --> 00:02:01.160
Remote Desktop Protocol and VNC‑enabled systems, as well as

00:02:01.170 --> 00:02:03.020
images from surveillance cameras.

00:02:04.440 --> 00:02:07.040
You can either select images with your current search

00:02:07.040 --> 00:02:13.590
parameters, or any image collected by Shodan. Next, we'll take a

00:02:13.590 --> 00:02:15.460
look at the command‑line tool for Shodan.