Shodan 0.1.1

Intro

Features

The main feature of this library is a rich models - they contain a lot of properties, which other libraries just not aware of. For example, Service object has the following properties with valueable information (if such services were detected on host, of course - otherwise they will just have null value):

• Cassandra
• DB2
• DNS
• Docker
• Elastic
• Etcd
• EthernetIP
• FTP
• Hive
• HTTP
• ISAKMP
• Lantronix
• Monero
• MongoDB
• MQTT
• Netbios
• NTP
• Redis
• RIP
• Rsync
• SMB
• SNMP
• SSH
• Vertx

All models and their complex properties also has ExtraValues property for an unknown keys in response.

The second feature, which makes this library unique, is a set of methods - all API is covered, including exploits and stream. There are even methods, that are not listed in documentantion - like ListScans() (https://api.shodan.io/shodan/scans) and Services() (https://api.shodan.io/shodan/services)

Third feature is a search query classes, which allows you to create query as CLR object, modify and even serialize it. The object is mutable, so you can, for example, increase a page in search parameters. Of course, such approach has its own limitations, that's why you can always use just a string for performing search.

Also, because of very big set of API methods, there are separate client classes for exploits, stream and alerts APIs. You can use them by themself or acces via ShodanClient class properties.

Basic usage example

This example shows how to create a client, compose a search query and how to use models later.

    class Program
    {
        static async Task Main()
        {
            string key = Environment.GetEnvironmentVariable("SHODAN_API_KEY");

            // If you prefer to use your own HttpClient, pass it to factory constructor - all clients will share it.
            ShodanClient client = new ClientFactory(key).GetFullClient();

            // All client methods are asynchronous;
            // The only exception is StreamClient, which has generator methods.
            ApiInfo apiInfo = await client.ApiInfo();
            Console.WriteLine("Unlocked credits left: {0}", apiInfo.UnlockedLeft);

            // You can create a query object for search or just pass a string to search method;
            // Fill "Text" property of query to specify a search term.
            ShodanSearchQuery query = new ShodanSearchQuery
            {
                // We want to find exposed ElasticSearch instances in China with a "readme" index
                // (typically it's an index with ransom note)
                Text = "readme",
                Country = "CN",
                Port = 9200
            };

            for (int i = 0; i < 10; i++)
            {
                Console.WriteLine(query.Parameters.Page);
                query.Parameters.Page++;

                SearchResult result = await client.Search(query);

                PrintElasticsInfo(result);
                query.Parameters.Page++; // ShodanSearchQuery object is mutable

                if (result.Services.Count < 100)
                    break;
            }

            Console.ReadLine();
        }

        private static void PrintElasticsInfo(SearchResult result)
        {
            foreach (Service service in result.Services.Where(s => s.Elastic != null))
            {
                Elastic elastic = service.Elastic;

                // you should be careful about nulls - Shodan responses are not stable and can lack some keys
                if (elastic.Cluster?.Indices?.Count > 0 && elastic.Cluster?.Indices?.Docs?.Count > 0)
                {
                    Console.WriteLine($"Exposed ElasticSearch at {service.IPStr}:{service.Port}");
                    Console.WriteLine($"Total docs: {elastic.Cluster.Indices.Docs.Count}");
                    Console.WriteLine($"Total bytes: {elastic.Cluster.Indices.Store?.SizeInBytes}");
                    Console.WriteLine($"Cluster name: {elastic.Cluster.ClusterName}");

                    Console.WriteLine("Indices:");
                    foreach (string indexName in elastic.Indices.Keys)
                    {
                        Console.WriteLine($"\t{indexName}");
                    }
                }
                Console.WriteLine();
            }
        }
    }