🔍 ShodanHunter

Multi-Technology Vulnerability Scanner for Bug Bounty Hunting

Hunt for vulnerabilities across multiple technologies using Shodan API. Perfect for bug bounty hunters and security researchers.

---

✨ Features

• 🎯 10+ Technologies: Citrix, Jenkins, GitLab, Jira, Confluence, WordPress, Apache Tomcat, Grafana, Kibana, Exposed Files
• 🚀 Efficient Scanning: Optimized Shodan queries with safe rate handling
• 📊 Organized Queries: Technology-specific query files for precision
• 💾 Clean Output: Deduplicated results ready for Nuclei scanning
• 🎨 Beautiful UI: Colored terminal output for better readability
• 🔧 Extensible: Easy to add new technologies

---

Quick Start

Clone repository

git clone https://github.com/algamil7x/ShodanHunter.git
cd ShodanHunter

Create virtual environment

python3 -m venv venv
source venv/bin/activate

Install dependencies

pip install -r requirements.txt

Set Shodan API Key

export SHODAN_API_KEY="your_api_key_here"

Verify installation

python shodanhunter.py -list

Getting Shodan API Key

• Get your API key from account page

⚠️ Important Requirement

This tool requires a Shodan PRO or Academic API key.

ShodanHunter relies heavily on advanced Shodan filters such as:

• product:
• http.favicon.hash
• ssl.cert.*
• technology-specific components

Free Shodan accounts will return little to no results.

If you are serious about bug bounty hunting with this tool, a paid Shodan account is strongly recommended.

---

📖 Usage

List Available Technologies

shodanhunter -list

Scan Single Technology

shodanhunter -tech citrix -d target.com

Output will be saved to:

output/target.com/citrix.txt

Scan All Technologies

shodanhunter -tech all -d target.com

Output will be saved to:

output/target.com

---

🎯 Supported Technologies

Technology	Query File	Known CVEs	Bug Bounty Popular
Citrix Gateway	citrix.txt	50+	⭐⭐⭐
Jenkins	jenkins.txt	100+	⭐⭐⭐
GitLab	gitlab.txt	80+	⭐⭐⭐
Atlassian Jira	jira.txt	60+	⭐⭐
Confluence	confluence.txt	70+	⭐⭐
Apache Tomcat	apache.txt	90+	⭐⭐
WordPress	wordpress.txt	200+	⭐⭐⭐
Grafana	grafana.txt	40+	⭐⭐
Kibana	kibana.txt	30+	⭐
Exposed Files	exposed.txt	N/A	⭐⭐⭐

---

🔗 Integration with Nuclei

Perfect workflow for bug bounty:

# Step 1: Hunt with ShodanHunter
python3 shodanhunter.py -tech citrix -d target.com 

# Step 2: Scan with Nuclei
cat targets.txt | nuclei -tags citrix,xss -severity high,critical -o vulns.txt

# Step 3: Review vulnerabilities
cat vulns.txt

---

📁 Project Structure

ShodanHunter/
├── shodanhunter.py          # Main tool
├── requirements.txt         # Python dependencies
├── README.md                # This file
├── queries/                 # Query files directory
│   ├── citrix.txt          # Citrix/NetScaler queries
│   ├── jenkins.txt         # Jenkins queries
│   ├── gitlab.txt          # GitLab queries
│   ├── jira.txt            # Jira queries
│   ├── confluence.txt      # Confluence queries
│   ├── wordpress.txt       # WordPress queries
│   ├── apache.txt          # Apache Tomcat queries
│   ├── grafana.txt         # Grafana queries
│   ├── kibana.txt          # Kibana queries
│   └── exposed.txt         # Exposed files queries
├── examples/               # Example outputs
│   └── demo_output.txt

---

🤝 Contributing

Contributions are welcome! See CONTRIBUTING.md for details.

Quick Contribution Guide

1. Fork the repository
2. Create feature branch (git checkout -b feature/NewTech)
3. Add queries to queries/newtech.txt
4. Update AVAILABLE_TECH in shodanhunter.py
5. Commit changes (git commit -m 'Add NewTech support')
6. Push to branch (git push origin feature/NewTech)
7. Open Pull Request

---

⚠️ Disclaimer

For educational and authorized security testing only.

• ✅ Use only on bug bounty programs with permission
• ✅ Read and follow program scope carefully
• ❌ Do NOT use on unauthorized targets
• ❌ Do NOT abuse Shodan API

The authors are not responsible for misuse of this tool.

---

📜 License

This project is licensed under the MIT License - see LICENSE file.

---

🙏 Acknowledgments

• Inspired by real-world bug bounty hunting workflows
• Built for the security community
• Powered by Shodan
• Thanks to all contributors

---

📞 Contact

• Twitter/X: @algamil7x
• GitHub: @algamil7x
• Issues: Report bugs
• Pull Requests: Contribute

---

Happy Hunting! 🎯🔥

Made with ❤️ by Bug Bounty Hunters, for Bug Bounty Hunters