Skip to content

Update to Shodan API#160

Open
loveapis wants to merge 1 commit intostreaak:masterfrom
loveapis:master
Open

Update to Shodan API#160
loveapis wants to merge 1 commit intostreaak:masterfrom
loveapis:master

Conversation

@loveapis
Copy link
Copy Markdown

@loveapis loveapis commented Jul 18, 2024

The /notifier Shodan API endpoint discloses the email address attached to the API key thereby allowing the tester to verify if the Shodan API key belongs to a program or company under pentest.

For instance is the response to the request is;

{
    "matches": [
        {
            "description": null,
            "args": {
                "to": "example@example.com"
            },
            "provider": "email",
            "id": "default"
        },
        ...
    ],
    "total": 2
}

The tester can make a report to example site with proof the API key belongs to one of their employees/staff.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant