Compare commits

..

No commits in common. "c2d9e74c277873f1d61a99638be890f455192135" and "40906218817205de5a9b3724b6908d996d31e207" have entirely different histories.

View File

@ -28,9 +28,8 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#images" target="_blank">Images</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#threat-intelligence" target="_blank">Threat Intelligence</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#web-history" target="_blank">Web History</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#surveillance-cameras" target="_blank">Surveillance cameras</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#crypto" target="_blank">Crypto</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#people" target="_blank">People</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#surveillance-cameras" target="_blank">Surveillance cameras</a>
<a href="https://github.com/edoardottt/awesome-hacker-search-engines#crypto" target="_blank">Crypto</a>
</p>
### General Search Engines
@ -67,6 +66,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [Quake](https://quake.360.net/quake/#/index) - Cyberspace surveying and mapping system
- [Hunter](https://hunter.how/) - Internet Search Engines For Security Researchers
### Vulnerabilities
- [NIST NVD](https://nvd.nist.gov/vuln/search) - US National Vulnerability Database
@ -97,6 +97,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [Microsoft Security Response Center](https://msrc.microsoft.com/update-guide/en-us) - Reports of security vulnerabilities affecting Microsoft products and services
- [VARIoT](https://www.variotdbs.pl/vulns/) - VARIoT IoT Vulnerabilities Database
### Exploits
- [Exploit-DB](https://www.exploit-db.com/) - Exploit Database
@ -124,7 +125,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [Coalition Exploit Scoring System](https://ess.coalitioninc.com/) - Model that dynamically scores new and existing vulnerabilities to reflect their exploit likelihood
- [WADComs](https://wadcoms.github.io/) - Interactive cheat sheet containing a curated list of offensive security tools and their respective commands to be used against Windows/AD environments
- [LOLAPPS](https://lolapps-project.github.io/) - Compendium of applications that can be used to carry out day-to-day exploitation
- [Living off the Hardware](https://lothardware.com.tr/) - Resource collection that provides guidance on identifying and utilizing malicious hardware and malicious devices
### Attack Surface
@ -145,6 +146,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [Deepinfo](https://www.deepinfo.com/) - Empower your security with the most comprehensive Internet data
- [CloudFlare Radar](https://radar.cloudflare.com/) - Global Internet traffic, attack, and technology trends and insights
### Code
- [GitHub Code Search](https://github.com/search?type=code) - Search globally across all of GitHub, or scope your search to a particular repository or organization
@ -175,6 +177,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [SearchFTPs](https://www.searchftps.net/) - The most advanced FTP Search Engine service maintained by members
- [Ecosyste.ms](https://ecosyste.ms/) - An open API service providing package, version and dependency metadata of many open source software ecosystems and registries
### Mail Addresses
- [Hunter.io](https://hunter.io/) - Find professional email addresses in seconds
@ -203,6 +206,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [ContactOut](https://contactout.com/) - Most accurate email finder for personal and work email outreach
- [validemail.io](https://validemail.io/) - Validate email addresses for deliverability with our Email Validation API
### Domains
- [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain
@ -251,6 +255,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [web-check.xyz](https://web-check.xyz/) - All-in-one OSINT tool, for quickly checking a websites data
- [TinyScan](https://www.tiny-scan.com/) - Effortlessly Dive into URL Details
### DNS
- [DNSDumpster](https://dnsdumpster.com/) - DNS recon & research, find & lookup dns records
@ -277,7 +282,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [Robtex DNS Lookup](https://www.robtex.com/dns-lookup/) - Get detailed information on the nameservers associated with a domain name
- [DNSMap](https://dnsmap.io/) - Worldwide DNS Propagation Checker
- [Validin](https://app.validin.com/) - Massive collection of DNS records with free DNS history search
- [dnslookup.pro](https://dnslookup.pro/) - Advanced DNS Record Analysis & Troubleshooting
### Certificates
@ -292,6 +297,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates
- [certs.io](https://certs.io/) - Search TLS certificates across the internet.
### WiFi Networks
- [Wigle.net](https://wigle.net/) - Maps and database of 802.11 wireless networks with statistics
@ -301,6 +307,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [openwifimap.net](https://openwifimap.net/) - HTML5 map with OpenWiFiMap data
- [mylnikov.org](https://www.mylnikov.org/) - Public API implementation of Wi-Fi Geo-Location database
### Device Information
- [MACVendorLookup.com](https://www.macvendorlookup.com/) - Look up the vendor for a specific MAC Address
@ -309,6 +316,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [maclookup.app](https://maclookup.app/) - Find the vendor name of a device by entering an OUI or a MAC address
- [macvendors.co](https://macvendors.co/) - Get vendor name of your network device using its mac address
### Credentials
- [Have I Been Pwned](https://haveibeenpwned.com/) - Check if your email or phone is in a data breach
@ -319,6 +327,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [LeakedPassword](https://leakedpassword.com/) - Search across multiple data breaches to see if your pass has been compromised
- [BugMeNot](https://bugmenot.com/) - Find and share logins
### Leaks
- [WikiLeaks](https://wikileaks.org/) - News leaks and classified media provided by anonymous sources
@ -341,6 +350,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln
- [onionengine.com](https://onionengine.com/) - A search engine for services accessible on the Tor network
- [OnionLand](https://onionlandsearchengine.com/) - Discover Hidden Services and access to Tor's onion sites
### Social Networks
These can be useful for osint and social engineering.
@ -366,6 +376,7 @@ These can be useful for osint and social engineering.
- [Tinder](https://tinder.com/)
- [Threads](https://www.threads.net/)
### Phone Numbers
- [NumLookup](https://www.numlookup.com/) - Free reverse phone lookup
@ -395,6 +406,7 @@ These can be useful for osint and social engineering.
- [Radaris Phone Lookup](https://radaris.com/#findPhoneH) - Look up any phone number to see its owner and identify who's calling or texting you
- [Reverse Phone Lookup](https://www.reversephonecheck.com/) - Reverse phone number lookup with millions of listings including name or address
### Images
- [Google Image Search](https://images.google.com/) - The most comprehensive image search on the web
@ -420,6 +432,7 @@ These can be useful for osint and social engineering.
- [Exif data](http://exifdata.com/) - Online application that lets you take a deeper look at your favorite images
- [Image Identify](https://www.imageidentify.com/) - Image recognition site, just drag your image & identify
### Threat Intelligence
- [MITRE ATT&CK](https://attack.mitre.org/) - Globally-accessible knowledge base of adversary tactics and techniques
@ -480,8 +493,7 @@ These can be useful for osint and social engineering.
- [Living off the False Positive](https://br0k3nlab.com/LoFP/) - Autogenerated collection of false positives sourced from some of the most popular rule sets
- [HijackLibs](https://hijacklibs.net/) - Project for tracking publicly disclosed DLL Hijacking opportunities
- [bootloaders.io](https://www.bootloaders.io/) - Curated list of known malicious bootloaders for various operating systems
- [WTFBins](https://wtfbins.wtf/) - Catalogue benign applications that exhibit suspicious behavior. These binaries can emit noise and false positives in threat hunting and automated detections
- [LOFLCAB](https://lofl-project.github.io/) - Document every cmdlet, binary, script, and WMI class that can be used for Living Off the Foreign Land techniques
### Web History
@ -495,6 +507,7 @@ These can be useful for osint and social engineering.
- [Archive-It](https://archive-it.org/) - An archive of digital government and non-government organization (NGO) documents and reports
- [HAW](https://haw.nsk.hr/en/) - Croatian Web Archive
### Surveillance cameras
- [Insecam.org](http://www.insecam.org/en/) - The world biggest directory of online surveillance security cameras
@ -511,21 +524,13 @@ These can be useful for osint and social engineering.
- [Webcam Taxi](https://www.webcamtaxi.com/en/) - Live Virtual Travel
- [LiveWorldWebcams](https://liveworldwebcams.com/) - Live streaming webcams from around the world
### Crypto
- [ChainAbuse](https://www.chainabuse.com/) - Report malicious crypto activity
- [BlockChair](https://blockchair.com/) - Blockchain explorer, analytics and web services
- [BlockCypher](https://live.blockcypher.com/) - Search the block chain
### People
- [TruePeopleSearch](https://www.truepeoplesearch.com/) - Free people search tool. Search billions of public records
- [TruthFinder](https://www.truthfinder.com/people-search/) - A people search is a quick and simple way to find information on someone by name
- [BeenVerified](https://www.beenverified.com/) - BeenVerified's mission is to give people easy and affordable access to public record information
- [ZabaSearch](https://www.zabasearch.com/) - Free* People Search and Public Information Search Engine
- [PeekYou](https://www.peekyou.com/) - Fast People Search Made Easy
- [PeopleFinders](https://www.peoplefinders.com/people-search) - People Search
- [Pipl](https://pipl.com/) - The #1 source for identity & trust
### Unclassified
@ -534,6 +539,7 @@ These can be useful for osint and social engineering.
- [Pastebin](https://pastebin.com/) - Website where you can store text online for a set period of time
- [Wappalyzer](https://www.wappalyzer.com/) - Instant access to website technology stacks, company and contact details, social media profiles, email verification and more
### Not working / Paused
<!-- markdown-link-check-disable -->