Skip to main content

Cyware Orchestrate

Shodan

App Vendor: Shodan

App Category: None

Connector Version: 1.0.0

API Version: 1.0.0

About App

Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters. The Shodan app enables security teams to integrate with the Shodan enterprise application to monitor domains, DNS, and domain and IP address reputation.

The Shodan app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

Lookup Domain Reputations

This action retrieves the reputation details of a domain.

Lookup IP Address Reputation

This action retrieves the reputation details of an IP address.

DNS Lookup

This action retrieves the DNS entries of a domain.

Get DNS Info

This action retrieves the DNS information of a domain.

Reverse DNS Lookup

This action retrieves the hostnames using an IP address.

Configuration Parameters

The following configuration parameters are required for the Shodan app to communicate with the Shodan enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

API Key

Enter the access API key.

Example:

"sample key"

Text

Required

Action: Lookup Domain Reputations

This action retrieves the reputation details of a domain.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain name.

Example:

"sample domain"

Text

Required

Example Request

[
  {
    "domain_name": "sample domain"
  }
]
Action: Lookup IP Address Reputation

This action retrieves the reputation details of an IP address.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

IP Address

Enter the IP address.

Example:

"1.1.1.1"

Text

Required

Example Request

[
  {
    "ip": "1.1.1.1"
  }
]
Action: DNS Lookup

This action retrieves the DNS entries of a domain.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain Name

Enter the domain name.

Example:

"sample domain"

Text

Required

Example Request

[
  {
    "domain_name": "sample domain"
  }
]
Action: Get DNS Info

This action retrieves the DNS information of a domain.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain Name

Enter the domain name.

Example:

"sample domain"

Text

Required

Example Request

[
  {
    "domain_name": "sample domain"
  }
]
Action: Reverse DNS Lookup

This action retrieves the hostnames using an IP address

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

IP Address

Enter the IP address.

Example:

"1.1.1.1"

Any

Required

Example Request

[
  {
    "ip": "1.1.1.1"
  }
]