EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Shodan
Query the Shodan internet-wide scan database to find and profile internet-exposed devices. Single API key resolved from vault. Read the account plan and remaining credits, run searches that return trimmed device records (IP, org, product, location, open port, CVEs) with facet rollups, count results without spending query credits, pull the full banner history for one IP, do keyless InternetDB lookups (ports, CPEs, tags, CVEs), and request on-demand scans of IPs you own. Built for AV/IoT exposure recon.
Truenas
Administration of a TrueNAS SCALE host (25.04+) via its JSON-RPC 2.0 WebSocket API (wss://, API-key auth). Read/audit of apps + their port bindings, NFS/SMB shares + their host allowlists, services, network interfaces, and a service- exposure roll-up; plus a narrow, reversible mutating surface — flip an app port between published/exposed, and set NFS networks/hosts and SMB hostsallow/hostsdeny. Refuses any non-TLS endpoint by construction (TrueNAS revokes an API key sent over cleartext). Verify-first; no pool/dataset/user or service start/stop.