turbot / steampipe-plugin-shodan Goto Github PK

View Code? Open in Web Editor NEW

27.0 10.0 3.0 467 KB

Use SQL to instantly query host, DNS and exploit information using Shodan. Open source CLI. No DB required.

Home Page: https://hub.steampipe.io/plugins/turbot/shodan

License: Apache License 2.0

Makefile 0.26% PLSQL 0.64% Go 99.10%

steampipe steampipe-community shodan-plugin shodan sql golang go postgres-fdw postgres steampipe-plugin

steampipe-plugin-shodan's Introduction

Shodan Plugin for Steampipe

Get started →
Documentation: Table definitions & examples
Community: Join #steampipe on Slack →
Get involved: Issues

Quick start

Install the plugin with Steampipe:

steampipe plugin install shodan

Run a query:

select * from shodan_host_service where ip = '8.8.8.8'

Engines

This plugin is available for the following engines:

Engine	Description
Steampipe	The Steampipe CLI exposes APIs and services as a high-performance relational database, giving you the ability to write SQL-based queries to explore dynamic data. Mods extend Steampipe's capabilities with dashboards, reports, and controls built with simple HCL. The Steampipe CLI is a turnkey solution that includes its own Postgres database, plugin management, and mod support.
Postgres FDW	Steampipe Postgres FDWs are native Postgres Foreign Data Wrappers that translate APIs to foreign tables. Unlike Steampipe CLI, which ships with its own Postgres server instance, the Steampipe Postgres FDWs can be installed in any supported Postgres database version.
SQLite Extension	Steampipe SQLite Extensions provide SQLite virtual tables that translate your queries into API calls, transparently fetching information from your API or service as you request it.
Export	Steampipe Plugin Exporters provide a flexible mechanism for exporting information from cloud services and APIs. Each exporter is a stand-alone binary that allows you to extract data using Steampipe plugins without a database.
Turbot Pipes	Turbot Pipes is the only intelligence, automation & security platform built specifically for DevOps. Pipes provide hosted Steampipe database instances, shared dashboards, snapshots, and more.

Developing

Prerequisites:

Clone:

git clone https://github.com/turbot/steampipe-plugin-shodan.git
cd steampipe-plugin-shodan

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/shodan.spc

Try it!

steampipe query
> .inspect shodan

Open Source & Contributing

This repository is published under the Apache 2.0 (source code) and CC BY-NC-ND (docs) licenses. Please see our code of conduct. We look forward to collaborating with you!

Steampipe is a product produced from this open source software, exclusively by Turbot HQ, Inc. It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #steampipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

steampipe-plugin-shodan's People

Contributors

Stargazers

Watchers

Forkers

achillean ekmixon

steampipe-plugin-shodan's Issues

Update readme and index to new format.

Update the format of the readme and index files to match the new content format.

shodan geo search throws strange error, yields data in steampipe cli but not psql

in steampipe cli

select
*
from
shodan_search
where
query = 'geo:-31.921836,115.95020622,10'

Error: json: cannot unmarshal object into Go struct field Minecraft.matches.minecraft.description of type string (SQLSTATE HV000)

but data is returned

+--------------------------------+----------+----------------------------------------------------------------------------------+----------------------------------->
| query | asn | hostnames | isp >
+--------------------------------+----------+----------------------------------------------------------------------------------+----------------------------------->
| geo:-31.921836,115.95020622,10 | AS16509 | ["server-13-32-127-92.per50.r.cloudfront.net"] | Amazon.com, Inc. >
| | | | >
| geo:-31.921836,115.95020622,10 | AS7545 | ["60-242-48-54.tpgi.com.au"] | TPG Telecom Limited >

in psql

steampipe=> select
steampipe-> *
steampipe-> from
steampipe-> shodan_search
steampipe-> where
steampipe-> query = 'geo:-31.921836,115.95020622,10'
steampipe-> ;
ERROR: rpc error: code = Unknown desc = json: cannot unmarshal object into Go struct field Minecraft.matches.minecraft.description of type string
steampipe=>

and no data is returned

Update steampipe-plugin-sdk to v1.4.1

Line output style broken with shodan_host_service table

Describe the bug
The output of a query against the shodan_host_service table has extra line breaks in it

Steampipe version (steampipe -v)
v0.3.3

Plugin version (steampipe plugin list)
0.0.1

To reproduce
select * from shodan_host_service where ip = '3.239.46.31'

Expected behavior

-[ RECORD 1  ]---------------------------------------------------------------------------
ip          | 3.239.46.31
ipv6        | <null>
port        | 22
timestamp   | 2021-03-24 16:12:17
hash        | 163854181
domains     | ["amazonaws.com"]

Actual behavior

-[ RECORD 1  ]---------------------------------------------------------------------------
ip          | 3.239.46.31






ipv6        | <null>






port        | 22






timestamp   | 2021-03-24 16:12:17







hash        | 163854181







domains     | ["amazonaws.com"]