id: api-shodan

info:
  name: Shodan API Test
  author: 0ri2N
  severity: info
  description: |
    Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters.
  reference:
    - https://shodan.io
    - https://developer.shodan.io
    - https://developer.shodan.io/api
  metadata:
    max-request: 1
  tags: recon,shodan,token-spray

self-contained: true

http:
  - method: GET
    path:
      - https://api.shodan.io/api-info?key={{token}}

    matchers:
      - type: word
        part: body
        words:
          - '"plan"'
          - '"unlocked"'
          - '"scan_credits"'
        condition: and

# digest: 4b0a00483046022100864b75407975119df732a8e145fe6bbaf86ed26d7bc337d63fcdcd9d3c5fd4d8022100a7c5f073f7b4eb64fba8c9ea12494df3197d42a4457a8cffc36b54bb4c62a75a:922c64590222798bb761d5b6d8e72950