WEBVTT

00:00:01.040 --> 00:00:05.360
Shodan is a commercial service funded through various paid plans.

00:00:05.740 --> 00:00:08.370
Based on the plan you select, additional access to

00:00:08.370 --> 00:00:10.660
Shodan data and capabilities are granted.

00:00:11.140 --> 00:00:14.670
These include the number of monthly credits for query and

00:00:14.670 --> 00:00:18.020
scan, the number of monitored IP addresses,

00:00:18.230 --> 00:00:19.880
the available search filters,

00:00:19.960 --> 00:00:24.500
batch lookups for IP addresses, and enterprise‑specific capabilities.

00:00:24.940 --> 00:00:28.540
The various levels include a basic membership level with a one‑time fee,

00:00:28.620 --> 00:00:32.560
freelancer, small business, and corporate levels have monthly fees.

00:00:32.940 --> 00:00:36.910
The enterprise level has access to all Shodan data and capabilities.

00:00:37.940 --> 00:00:41.420
Official documentation is available either through the Complete

00:00:41.420 --> 00:00:46.220
Guide to Shodan by the creator of Shodan for $5 on LeanPub, or on

00:00:46.220 --> 00:00:48.990
the Shodan website. As I showed in a demo,

00:00:49.090 --> 00:00:52.750
there's a site for the Shodan command‑line tool setup and use, and there's

00:00:52.750 --> 00:00:55.460
also a site for useful snippets for the command line.

00:00:55.940 --> 00:00:59.270
Other capabilities include network monitoring for an

00:00:59.270 --> 00:01:00.960
organization's network ranges,

00:01:01.440 --> 00:01:06.460
maps that show geo‑location information on search findings, honeypot detection,

00:01:06.940 --> 00:01:10.060
exploit search, and web browser plugins.

00:01:11.040 --> 00:01:14.210
There are also reconnaissance and resource development tools that

00:01:14.210 --> 00:01:17.250
use the Shodan API to expand their capabilities.

00:01:17.740 --> 00:01:21.940
These include theHarvester, Spiderfoot, Maltego, and Recon‑ng.

00:01:23.040 --> 00:01:26.550
Pluralsight has Red Team Tools courses for most of these tools.

00:01:27.540 --> 00:01:30.050
If you're an organization concerned about the reach of Shodan

00:01:30.050 --> 00:01:32.490
and the information it has on your devices,

00:01:32.510 --> 00:01:33.660
what should you do?

00:01:34.340 --> 00:01:37.650
Well, start with reducing your attack surface. Remove

00:01:37.660 --> 00:01:40.060
anything on your perimeter that isn't needed.

00:01:40.540 --> 00:01:44.310
Do a better job of managing the remaining systems. And scan your

00:01:44.310 --> 00:01:47.150
network ranges to identify and remediate issues.

00:01:47.540 --> 00:01:51.220
You should also limit access with VPNs to protect systems and data

00:01:51.220 --> 00:01:54.420
that need to be accessible to your employees and partners. And use

00:01:54.420 --> 00:01:57.820
firewalls and other network access control methods to protect and

00:01:57.820 --> 00:01:59.950
monitor those accessible systems.

00:02:00.940 --> 00:02:02.160
That's all for this course.

00:02:02.170 --> 00:02:04.920
But remember that Shodan has a wealth of information and

00:02:04.930 --> 00:02:07.150
other capabilities waiting to be explored.

00:02:07.640 --> 00:02:10.650
I hope you enjoy the demonstrations of Shodan and can put

00:02:10.650 --> 00:02:12.860
that information to good use in your work.

00:02:13.240 --> 00:02:14.250
Thank you for watching.

00:02:14.310 --> 00:02:18.250
I'm Keith Watson, and I look forward to learning with you on the next course!