A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Go to file
vrenzolaverace d59c89e2e7
Merge pull request #5 from FeljxFeljx/main
added tables for a better overview
2022-06-30 07:57:53 +02:00
README.md Update README.md 2022-06-29 14:12:25 +02:00

Awesome Hacker Search Engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

GeneralServersVulnerabilitiesExploitsAttack surfaceCodeMail addressesDomainsURLsDNSCertificatesWiFi networksCredentialsSocial NetworksPhone numbersThreat IntelligenceWeb History

General Search Engines

Servers

name description
Shodan Search Engine for the Internet of Everything
Onyphe.io Cyber Defense Search Engine for open-source and cyber threat intelligence data
ZoomEye Global cyberspace mapping
GreyNoise The source for understanding internet noise
Natlas
FOFA

Vulnerabilities

name description
NIST NVD National Vulnerability Database
MITRE CVE Identify, define, and catalog
osv.dev Open Source Vulnerabilities
cloudvulndb.org The Open Cloud Vulnerability & Security Issue Database
Vulners.com Your Search Engine for Security Intelligence
opencve.io Easiest way to track CVE updates and be alerted about new vulnerabilities
security.snyk.io Open Source Vulnerability Database
Rapid7 - DB Vulnerability & Exploit Database
CVEDetails The ultimate security vulnerability datasource
VulnIQ
SynapsInt The unified OSINT research tool
Aqua Vulnerability Database Vulnerabilities and weaknesses in open source applications and cloud native infrastructure

Exploits

name description
Exploit-DB Exploit Database
Sploitus Convenient central place for identifying the newest exploits
Rapid7 - DB Vulnerability & Exploit Database

Attack Surface

name description
FullHunt.io Attack surface database of the entire Internet
BynaryEdge We scan the web and gather data for you
Censys Attack Surface Management Solutions
RedHunt Labs Discover your Attack Surface, Continuously
SecurityTrails The Total Internet Inventory
criminalip.io Cyber Threat Intelligence Search Engine and

Code Search Engines

name description
GitHub Code Search
grep.app Search across a half million git repos
publicwww.com Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
SearchCode Search 75 billion lines of code from 40 million projects
NerdyData Find companies based on their website's tech stack or code
RepoSearch Source code search engine that helps you find implementation details, example usages or just analyze code

Mail addresses

name description
Hunter.io Find professional email addresses in seconds
PhoneBook Lists all domains, email addresses, or URLs for the given input domain
IntelligenceX Search engine and data archive
Reacher.email Open-Source Email Verification
RocketReach
email-format.com Find the email address formats in use at thousands of companies
EmailHippo Email address verification technology
ThatsThem Reverse email lookup
verify-email.org
Melissa - Emailcheck
VoilaNorbert I can find anyone's email address
SynapsInt The unified OSINT research tool
skymem.info Find email addresses of companies and people

Domains

name description

URLs

DNS

name description

Certificates

name description

WiFi networks

Credentials

Social Networks

These can be useful for osint and social engineering.

Phone numbers

Threat Intelligence

Web History

Unclassified


If you want to propose changes, just open an issue.