‫Showdown is a search engine over the Internet for finding connected devices.
‫If a device is directly hooked up to the Internet, then Shodan queries it for various publicly available
‫information.
‫So it scans the entire IP version for network.
‫And parses the results using the better information.
‫The types of devices that are indexed can vary tremendously, ranging from small desktops right up through
‫nuclear power plants and just about everything in between.
‫Some describe it as a search engine for hackers.
‫Now, Shodan is integrated with MSF, so you can query Shodan from MSF.
‫However, to accomplish this, the first step is to get an API key by registering with Shodan.
‫Then you can you should end from MSF console.
‫So I'll set up a search for a showdown just like that.
‫OK, so there are only three auxiliaries for showdown.
‫And I'll use the showdown search module.
‫OK, so now show the options.
‫And these are the options, and as you can see here, you don't have classic variables such as our host
‫and Arpad.
‫But there is an important variable here.
‫It is Shodan Apink.
‫Now you must have an API key to perform searches on showdown.
‫So how about if I show you the showdown interface and copy my API key to use?
‫So go to your Web browser and just type showed in in the address bar.
‫And of course, the first row of the result list is what you're going to look for, Shodan Dot Io.
‫Now, I suggest strongly that you explore the website and create an account because you really going
‫to get to love showdown.
‫So now I'm going to log in.
‫This is my account's homepage, and in the upper right hand corner, there is a button and it's called
‫Show Apink.
‫So let's click on that and here is my APIC.
‫You can get one for yourself in exactly the same way.
‫But what I'm going to do is I'll copy it and I'll use it in my MSF console and go back to MSF console.
‫All right, so now I set the showdown API key variable to the copied key.
‫And let's write a query to the query variable.
‫Let's look for my admin pages.
‫Now, wouldn't you love to have some search filters here, but I can't at this point because I don't
‫use the paid service.
‫So I'll just make a simple search.
‫And let me take one more time just to make sure everything's right.
‫OK, now we can run the module.
‫Now, sometimes it takes a while, but I don't think it's not working.
‫So here are the result.
‫And let's randomly choose an IP, so I'm going to copy this and open it from the browser.
‫And this is your imaginary targets page.
‫Now, what I want to do here is, yeah, you can look for Internet connected services that your target's
‫connected to.
‫Besides a keyword search, shodan allows you to be specific in your search.
‫So what does that mean?
‫You can, for instance, find devices by city, country or IP address or IP address range using c IDR
‫notation so we can get even more specific, providing it with GPS coordinates, hostname operating system
‫and port.
‫So I've made a random search, but you can also make a detailed one.