id: api-shodan

info:
  name: Shodan API Test
  author: 0ri2N
  severity: info
  description: |
    Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters.
  reference:
    - https://shodan.io
    - https://developer.shodan.io
    - https://developer.shodan.io/api
  metadata:
    max-request: 1
  tags: recon,shodan,token-spray

self-contained: true

http:
  - method: GET
    path:
      - https://api.shodan.io/api-info?key={{token}}

    matchers:
      - type: word
        part: body
        words:
          - '"plan"'
          - '"unlocked"'
          - '"scan_credits"'
        condition: and
# digest: 4a0a00473045022100d26ff386d852df77df1b3c25ae13df4546d68fa8bb44c3501419c11a303d7384022001dc102ea79dfc8ad415651ac44b67fa04edd9606194c4dc2845992d0d0edfe2:922c64590222798bb761d5b6d8e72950