/karma_v1

KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Ports.

Primary LanguageShell

Follow on Twitter

Do check the latest one: KARMA_V2 (https://github.com/Dheerajmadhukar/karma_v2)

What is this?

KARMA_v1 is a simple bash script automation that can talk to Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Ports, Products, Hostname, Server Details.

What's special about this tool?

  • Powerful and flexible results via Shodan Dorks
  • SSL SHA1 checksum/fingerprint Search
  • Only hit In-Scope IPs
  • Verify each IP with SSL/TLS certificate issuer match RegEx
  • Find out all ports including well known/uncommon
  • Grab all targets vulnerabilities related to CVEs
  • Banner grab for each IP & Product

Its (karma_v1) a bit slow due to shodan API rate limit.

This VERSION (karma_v1) limit to 1000 IPs/Results only. NEW UPDATES WILL BE ADDED SOON ;)

Installation

1. Clone the repo

# git clone https://github.com/Dheerajmadhukar/karma_v1.git

2. Install shodan python module

# pip3 install shodan

3. Install JSON Parser [JQ]

# apt install jq -y

4. Install httpx @pdiscoveryio to probe the requests

# GO111MODULE=on go get -v github.com/projectdiscovery/httpx/cmd/httpx

5. Install Interlace @codingo to multithread [Follow the codingo interlace repo instructions]

Clone https://github.com/codingo/Interlace.git & install accordingly.

Ok, how do I use it?

# cat > .token
SHODAN_PREMIUM_API_HERE
# bash karma_v1 target.tld

Output will be saved in output/target.tld-YYY-MM-DD directory

Dheerajmadhukar

Some example usage:

# bash karma_v1 target.tld
Requirements