msfconsole
use auxiliary/gather/shodan_search
登录 https://exploits.shodan.io 之后 获取 APIKEY
show options
得到如下结果
Module options (auxiliary/gather/shodan_search):
Name Current Setting Required Description
---- --------------- -------- -----------
DATABASE false no Add search results to the database
MAXPAGE 1 yes Max amount of pages to collect
OUTFILE no A filename to store the list of IPs
QUERY yes Keywords you want to search for
REGEX .* yes Regex search for a specific IP/City/Country/Hostname
SHODAN_APIKEY yes The SHODAN API key
设置 APIKEY
set SHODAN_APIKEY 1AS5aYeKNKeeiUodMBraG55cMyozTVYN
设置要查询的关键字比如要搜索 网络上的摄像头
set QUERY "webcamxp"
然后直接执行
shell
run
```shell```
[*] Total: 1661 on 17 pages. Showing: 1 page(s)
[*] Collecting data, please wait...
Search Results
==============
IP:Port City Country Hostname
------- ---- ------- --------
102.182.77.130:9090 Cape Town South Africa 102-182-77-130.ip.afrihost.capetown
108.48.149.30:8080 Washington United States mail.fifiscreativekidscenter.com
122.116.41.8:8080 Xindian Taiwan 122-116-41-8.hinet-ip.hinet.net
139.162.119.9:9000 Tokyo Japan li1603-9.members.linode.com
139.59.56.96:49152 Doddaballapura India
139.59.56.96:52869 Doddaballapura India
151.62.34.215:8080 Verona Italy
154.127.186.9:8080 Luanda Angola cust9-186.127.154.tvcabo.ao
164.128.164.102:7547 Zürich Switzerland 102.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.103:8888 Zürich Switzerland 103.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.106:60001 Zürich Switzerland 106.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.109:80 Zürich Switzerland 109.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.111:37215 Zürich Switzerland 111.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.112:81 Zürich Switzerland 112.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.114:49152 Zürich Switzerland 114.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.117:49152 Zürich Switzerland 117.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.118:50000 Zürich Switzerland 118.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.11:9000 Zürich Switzerland 11.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.121:80 Zürich Switzerland 121.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.126:37215 Zürich Switzerland 126.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.126:50000 Zürich Switzerland 126.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.12:37215 Zürich Switzerland 12.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.14:7547 Zürich Switzerland 14.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.15:80 Zürich Switzerland 15.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.16:80 Zürich Switzerland 16.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.16:9000 Zürich Switzerland 16.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.21:60001 Zürich Switzerland 21.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.22:8888 Zürich Switzerland 22.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.23:9000 Zürich Switzerland 23.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.24:50000 Zürich Switzerland 24.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.24:8888 Zürich Switzerland 24.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.25:49152 Zürich Switzerland 25.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.27:52869 Zürich Switzerland 27.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.28:50000 Zürich Switzerland 28.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.29:9000 Zürich Switzerland 29.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.30:49152 Zürich Switzerland 30.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.33:52869 Zürich Switzerland 33.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.33:8080 Zürich Switzerland 33.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.35:49152 Zürich Switzerland 35.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.35:7547 Zürich Switzerland 35.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.37:37215 Zürich Switzerland 37.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.38:37215 Zürich Switzerland 38.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.39:50000 Zürich Switzerland 39.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.40:8080 Zürich Switzerland 40.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.44:7547 Zürich Switzerland 44.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.49:80 Zürich Switzerland 49.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.49:81 Zürich Switzerland 49.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.56:80 Zürich Switzerland 56.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.57:80 Zürich Switzerland 57.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.59:80 Zürich Switzerland 59.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.60:80 Zürich Switzerland 60.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.61:60001 Zürich Switzerland 61.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.62:7547 Zürich Switzerland 62.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.64:37215 Zürich Switzerland 64.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.66:50000 Zürich Switzerland 66.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.66:80 Zürich Switzerland 66.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.68:49152 Zürich Switzerland 68.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.68:81 Zürich Switzerland 68.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.69:81 Zürich Switzerland 69.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.6:7547 Zürich Switzerland 6.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.70:50000 Zürich Switzerland 70.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.70:81 Zürich Switzerland 70.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.70:9000 Zürich Switzerland 70.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.71:8888 Zürich Switzerland 71.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.72:80 Zürich Switzerland 72.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.73:52869 Zürich Switzerland 73.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.73:80 Zürich Switzerland 73.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.73:8888 Zürich Switzerland 73.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.75:60001 Zürich Switzerland 75.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.76:8888 Zürich Switzerland 76.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.81:52869 Zürich Switzerland 81.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.82:80 Zürich Switzerland 82.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.84:80 Zürich Switzerland 84.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.88:60001 Zürich Switzerland 88.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.89:37215 Zürich Switzerland 89.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.92:50000 Zürich Switzerland 92.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.94:49152 Zürich Switzerland 94.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.94:60001 Zürich Switzerland 94.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.94:80 Zürich Switzerland 94.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.95:60001 Zürich Switzerland 95.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.95:8080 Zürich Switzerland 95.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.96:9000 Zürich Switzerland 96.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.99:37215 Zürich Switzerland 99.164.128.164.static.wline.lns.ent.cust.swisscom.ch
164.128.164.99:50000 Zürich Switzerland 99.164.128.164.static.wline.lns.ent.cust.swisscom.ch
172.104.143.118:8080 Frankfurt am Main Germany li1659-118.members.linode.com
172.104.23.166:37215 Morris Plains United States li1842-166.members.linode.com
172.104.47.64:60001 Singapore Singapore li1627-64.members.linode.com 172.104.47.64:80 Singapore Singapore li1627-64.members.linode.com 173.8.238.13:8060 Englewood United States 173-8-238-13-Colorado.hfc.comcastbusiness.net
181.165.112.53:8090 Cipolletti Argentina 53-112-165-181.fibertel.com.ar
45.56.92.229:8080 Fremont United States li894-229.members.linode.com 69.145.129.4:8089 Helena United States host-69-145-129-4.hln-mt.client.bresnan.net
82.207.41.104:8057 Kyiv Ukraine 104-41-207-82.ip.ukrtel.net
93.90.222.18:49152 Moscow Russian Federation
93.90.222.21:49152 Moscow Russian Federation
93.90.222.27:60001 Moscow Russian Federation
93.90.222.28:37215 Moscow Russian Federation
94.130.57.50:515 Falkenstein Germany tor01.pseudonetworks.eu
[*] Auxiliary module execution completed