Skip to content

Commit

Permalink
Add Shodan continuous scanning (#418)
Browse files Browse the repository at this point in the history
* Shodan key not token

* Add Shodan continuous scanning

* Add spelling expects

* images

* titles

* Update deps to the latest

Signed-off-by: Tim Smith <[email protected]>

---------

Signed-off-by: Tim Smith <[email protected]>
Co-authored-by: Tim Smith <[email protected]>
  • Loading branch information
misterpantz and tas50 authored Oct 22, 2024
1 parent c50bc90 commit ff1f189
Show file tree
Hide file tree
Showing 7 changed files with 752 additions and 712 deletions.
4 changes: 4 additions & 0 deletions .github/actions/spelling/expect.txt
Original file line number Diff line number Diff line change
Expand Up @@ -172,8 +172,10 @@ JDAOZ
jdata
jdiaz
jdp
jemimah
jglt
Jhb
Jhnnd
jira
Jivv
joq
Expand Down Expand Up @@ -249,6 +251,7 @@ ocid
OFafff
openssh
openssl
Oqi
orstatement
osoverview
PACKNAME
Expand Down Expand Up @@ -345,6 +348,7 @@ unversioned
uppercasing
Utk
UWl
UXd
Vadym
VALUEX
VAULTNAME
Expand Down
2 changes: 1 addition & 1 deletion docs/platform/infra/networking/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,6 @@ Mondoo's continuous scanning ensures that you follow best networking security pr

- [Monitor host security by continuously scanning a domain or IP address](/platform/infra/networking/domain-ip)

Stay tuned for more networking security capabilities coming soon!
- [Use Shodan and Mondoo to continuously monitor host security](/platform/infra/networking/shodan)

---
42 changes: 42 additions & 0 deletions docs/platform/infra/networking/shodan.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
---
title: Secure a Domain or IP Address with Shodan
sidebar_label: Secure a Host with Shodan
sidebar_position: 3
description: Combine the capabilities of Mondoo and Shodan to secure domains and IP addresses
---

Mondoo can access [Shodan](https://help.shodan.io/the-basics/what-is-shodan) search results to ensure that your hosts don't have sensitive resources exposed on the internet. To do this, you need:

- A [Shodan account](https://account.shodan.io/) with a payment method set up

- Editor or Owner access to a Mondoo space

To continuously monitor domains or IP addresses with Mondoo and Shodan:

1. Access the Integrations > Add > Shodan page in one of two ways:

- New space setup: After creating a new Mondoo account or creating a new space, the initial setup guide welcomes you. Select **BROWSE INTEGRATIONS** and then under **Network Security**, select **Shodan**.

![Welcome to Mondoo Page](/img/platform/start/welcome_to_mondoo.png)

- INTEGRATIONS page: In the side navigation bar, under **INTEGRATIONS**, select **Add New Integration**. Under **Network Security**, select **Shodan**.

![Continuously scan domain or IP address with Mondoo and Shodan](/img/platform/infra/networking/add-shodan.png)

2. In the **Choose an integration name** box, type a name that makes it clear that this is a Shodan integration and what it secures.

3. In the **Provide your Shodan API key** box, paste your Shodan API key. To retrieve this key, go to your [Shodan Account Overview](https://account.shodan.io/). Next to **API Key** select **Show** and copy the text string key, such as `CjOqiWy14jemimahUpUXdJhnndYM9`.

![Shodan API key for Mondoo](/img/platform/infra/networking/shodan-key.png)

4. In the **Add domains or IP addresses** box, enter the domain name (such as lunalectric.com), IP address (such as 123.45.67.89), or IP address range (such as 210.57.57.128/28) of the host(s) to scan.

5. To add more domains or IP addresses, select the plus (+) sign and enter another domain name, address, or address range. Repeat this step to add as many as you want.

6. Select the **START SCANNING** button.

7. On the Recommended Policies page, enable the policies on which you want to base scans of the host. To learn more, read [Manage Policies](/platform/security/posture/policies/).

8. To complete the integration, select the **FINALIZE SETUP** button.

---
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
"write-heading-ids": "docusaurus write-heading-ids"
},
"dependencies": {
"@algolia/client-search": "^5.9.1",
"@algolia/client-search": "^5.10.1",
"@docusaurus/core": "^3.5.2",
"@docusaurus/plugin-client-redirects": "^3.5.2",
"@docusaurus/preset-classic": "^3.5.2",
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading

0 comments on commit ff1f189

Please sign in to comment.