This is an old revision of the document!
Use the directions below to get API Keys that you will use for OSINT and Social Engineering.
This can also be found on my GitHub here
While I will be making every effort to keep this Wiki up to date, there may be times that I fall behind. Please send me an email: mailto:firstname.lastname@example.org and in the interim, please refer to the vendor website.
The HaveIBeenPwned API key is $3.50 per month. With this key, you can use Recon-ng or Spiderfoot to pull from HIBP. Alternatively, you can write your own tool.
Sign up for a free account (allows 100 queries per month) here.
(Note: you cannot register with a free email account)
To find your key, click on your name/picture in the top right corner and select API. Copy your key.
Navigate to https://www.shodan.io/ and register for an account. Note: If you wait until Black Friday, Shodan typically offers a lifetime membership and API key for $10-50 via their Twitter.
Once you have created your Shodan account, select My Account in the top right corner (or navigate to https://account.shodan.io/) then make note of API Key.
Create a free account here. Once you are logged in, you will need to click on your icon in the top right corner (should be your initials), then select My Account then select API. You will need both your API ID and Secret.
Google requires 2 API keys, the regular API and the Custom Search Engine (CSE). The API requires a Google account and is accessible here. Once you have an API key, navigate to https://cse.google.com/cse/all for a CSE key.
For Twitter, we want to use the search API. Although I have never used it, there may be value in using the Engagement API.
For Bing, sign up here: https://azure.microsoft.com/en-us/services/cognitive-services/bing-web-search-api/