Use ShonyDanza tool for pen testing

ShonyDanza – Shodan is a search engine that’s collected information on internet connected devices. Shodan is one of the powerful tool for security researchers, penetration testers, hackers, and network defenders.

The ShonyDanza  makes using Shodan even easier by providing simple menus, query-building help, and configurable options for the user.

The features of ShonyDanza is:

1. Obtain IPs based on search criteria
2. Automatically exclude honeypots from the results based on your pre-configured thresholds
3. Pre-configure all IP searches to filter on your specified net range(s)
4. Pre-configure search limits
5. Use build-a-search to craft searches with easy building blocks
6. Use stock searches and pre-configure your own stock searches
7. Check if IPs are known malware C2s
8. Get host and domain profiles
9. Scan on-demand
10. Find exploits
11. Get total counts for searches and exploits
12. Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza

How to install and use ShonyDanza?

Step 1:

First of all we need to download the “shonyDanza” tool so execute the below command in your terminal.

									git clone https://github.com/fierceoj/ShonyDanza.git				

Now change the directory with “cd” command

Step 2:

Now we need to install the requirements of “shonydanza” tool so run the below command in your terminal

									pip install -r requirements.txt				

Step 3:

After completing the above steps run the following command then it will ask shodan api. go to create shodan developer account and copy paste api in your terminal

									python3 shonydanza.py				

Once you paste the Api key in your terminal just press enter key

Search for IPs

Choose option 1 from the main menu and choose option 4 to use your own Shodan search, or another option if suitable for your purposes. The build-a-search option helps the user build a search using a combination of some of the other search options. In my example, I’ve selected option 4 to use my own search to look for “200 OK vxworks”, which shows systems using VxWorks that return a 200 OK response

The IP results will print to the screen, and the tool will ask whether you want to save the IP list.

Get Host profile

Let’s return to the main menu and get a host profile of one of the IPs. Choose one of the IPs from your results and get the host profile using option 5 from the main menu. The host profile will return basic host info

Download Github tool