awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
https://github.com/edoardottt/awesome-hacker-search-engines
Last synced: 8 days ago
JSON representation
Uncategorized
Uncategorized
- Bing
- Yandex
- Ask
- Baidu
- You
- SearXNG
- EXALead
- DuckDuckGo
- Swisscows
- Naver
- Brave
- Yep
- Gibiru
- Kagi
- Censys Search - Certificates - Certificates Search
- Onyphe.io - Cyber Defense Search Engine for open-source and cyber threat intelligence data
- ZoomEye - Global cyberspace mapping
- GreyNoise - The source for understanding internet noise
- Natlas - Scaling Network Scanning
- Netlas.io - Discover, Research and Monitor any Assets Available Online
- FOFA - Cyberspace mapping
- Quake - Cyberspace surveying and mapping system
- Hunter - Internet Search Engines For Security Researchers
- NIST NVD - US National Vulnerability Database
- GitHub Advisory Database - Security vulnerability database inclusive of CVEs and GitHub originated security advisories
- cloudvulndb.org - The Open Cloud Vulnerability & Security Issue Database
- osv.dev - Open Source Vulnerabilities
- Vulners.com - Your Search Engine for Security Intelligence
- opencve.io - Easiest way to track CVE updates and be alerted about new vulnerabilities
- security.snyk.io - Open Source Vulnerability Database
- Mend Vulnerability Database - The largest open source vulnerability DB
- Rapid7 - DB - Vulnerability & Exploit Database
- CVEDetails - The ultimate security vulnerability datasource
- VulnIQ - Vulnerability intelligence and management solution
- SynapsInt - The unified OSINT research tool
- Aqua Vulnerability Database - Vulnerabilities and weaknesses in open source applications and cloud native infrastructure
- Vulmon - Vulnerability and exploit search engine
- VulDB - Number one vulnerability database
- ScanFactory - Realtime Security Monitoring
- Trend Micro Zero Day Initiative - Publicly disclosed vulnerabilities discovered by Zero Day Initiative researchers
- Google Project Zero - Vulnerabilities including Zero Days
- cnvd.org.cn - Chinese National Vulnerability Database
- InTheWild.io - Check CVEs in our free, open source feed of exploited vulnerabilities
- Vulnerability Lab - Vulnerability research, bug bounties and vulnerability assessments
- Red Hat Security Advisories - Information about security flaws that affect Red Hat products and services in the form of security advisories
- Cisco Security Advisories - Security advisories and vulnerability information for Cisco products, including network equipment and software
- Microsoft Security Response Center - Reports of security vulnerabilities affecting Microsoft products and services
- VARIoT - VARIoT IoT Vulnerabilities Database
- Exploit-DB - Exploit Database
- Sploitus - Convenient central place for identifying the newest exploits
- 0day.today - Ultimate database of exploits and vulnerabilities
- LOLBAS - Living Off The Land Binaries, Scripts and Libraries
- GTFOBins - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
- Payloads All The Things - A list of useful payloads and bypasses for Web Application Security
- XSS Payloads - The wonderland of JavaScript unexpected usages, and more
- exploitalert.com - Database of Exploits
- Reverse Shell generator - Online Reverse Shell generator with Local Storage functionality, URI & Base64 Encoding, MSFVenom Generator, and Raw Mode
- HackerOne hacktivity - See the latest hacker activity on HackerOne
- Bugcrowd Crowdstream - Showcase of accepted and disclosed submissions on Bugcrowd programs
- GTFOArgs - Curated list of Unix binaries that can be manipulated for argument injection
- shell-storm.org/shellcode - Shellcodes database for study cases
- Hacking the Cloud - Encyclopedia of the attacks/tactics/techniques that offensive security professionals can use on their next cloud exploitation adventure
- LOLDrivers - Open-source project that brings together vulnerable, malicious, and known malicious Windows drivers
- PwnWiki - Collection of TTPs (tools, tactics, and procedures) for what to do after access has been gained
- CVExploits Search - Your comprehensive database for CVE exploits from across the internet
- VARIoT - VARIoT IoT exploits database
- LOOBins - Detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes
- FullHunt.io - Attack surface database of the entire Internet
- BinaryEdge - We scan the web and gather data for you
- RedHunt Labs - Discover your Attack Surface, Continuously
- SecurityTrails - The Total Internet Inventory
- overcast-security.com - We make tracking your external attack surface easy
- IPInfo.io - The trusted source for IP address data
- IPData.co - IP Geolocation and Threat Intelligence API
- NetworksDB - Information about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organisations across the world
- ASNlookup - Quickly lookup updated information about specific Autonomous System Number (ASN), Organization, CIDR, or registered IP addresses (IPv4 and IPv6) among other relevant data
- BGPtools - Browse the Internet ecosystem
- BGPview - Debug and investigate information about IP addresses, ASN, IXs, BGP, ISPs, Prefixes and Domain names
- BigDataCloud - The API provides comprehensive location and network data
- RADb - The world's largest public routing registry
- Deepinfo - Empower your security with the most comprehensive Internet data
- Detectify - Complete External Attack Surface Management
- GitHub Code Search - Search globally across all of GitHub, or scope your search to a particular repository or organization
- Sourceforge - Complete Open-Source and Business Software Platform
- grep.app - Search across a half million git repos
- publicwww.com - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
- SearchCode - Search 75 billion lines of code from 40 million projects
- NerdyData - Find companies based on their website's tech stack or code
- HotExamples - Search code examples from over 1 million projects
- WP Directory - Lightning fast regex searching of code in the WordPress Plugin and Theme Directories
- GitHub Gists - Instantly share code, notes, and snippets
- CodeBerg - Collaboration platform and Git hosting for free and open source software, content and projects
- Fedora Pagure - Open Source software code hosting system
- LaunchPad - Software collaboration platform that provides: Bug tracking, Code hosting, Code reviews, Ubuntu package building and hosting, Translations...
- repo.or.cz - Public Git hosting site
- gitorious.org - Read-only mirror of the former gitorious.org code hosting website
- Sourcehut - Collection of tools useful for software development
- android.googlesource.com - Git repositories on android
- deps.dev - Service developed and hosted by Google to help developers better understand the structure, construction, and security of open source software packages
- WebFinery - Search the source code of the web
- Google Code Archive - Data found on the Google Code Project Hosting Service, which was turned down in early 2016
- Snipplr - Code snippet search engine that allows users to search and share code snippets across various programming languages and frameworks
- Postman Public Collections - Explore the best APIs, collections, workspaces in the world on the Postman Public API Network
- ScriptMafia - Download full nulled scripts
- SearchFTPs - The most advanced FTP Search Engine service maintained by members
- Ecosyste.ms - An open API service providing package, version and dependency metadata of many open source software ecosystems and registries
- Hunter.io - Find professional email addresses in seconds
- PhoneBook - Lists all domains, email addresses, or URLs for the given input domain
- IntelligenceX - Search engine and data archive
- Reacher.email - Open-Source Email Verification
- RocketReach - Your first-degree connection to any professional
- email-format.com - Find the email address formats in use at thousands of companies
- EmailHippo - Email address verification technology
- VoilaNorbert - I can find anyone's email address
- skymem.info - Find email addresses of companies and people
- findemails.com - Find Anyone's Email Address in Seconds
- Experte email finder - Find the right email address, even if you only know the name and the company
- EmailSherlock - Search for the Person behind the Email address and find our reputation score
- Anymail Finder - Find verified emails
- Tomba.io - With 430+ million email addresses indexed, effective search filters, and deliverability checks, Tomba's email finder is its most powerful tool
- Snov Email Finder
- EmailSearch.io - Find any emails and phones from a domain, Linkedin, name, and company
- Email Permutator+ - Find potential email addresses permutating different combinations
- Emailrep.io - Simple Email Reputation
- Mailboxvalidator - Secure and reliable email validation service to check for invalid email addresses
- ContactOut - Most accurate email finder for personal and work email outreach
- validemail.io - Validate email addresses for deliverability with our Email Validation API
- Omnisint - Subdomain enumeration
- Riddler - Allows you to search in a high quality dataset
- RobTex - Various kinds of research of IP numbers, Domain names, etc
- DomainIQ - Comprehensive Domain Intelligence
- whois.domaintools.com - Industry’s fastest domain discovery engine and broadest, most accurate data
- grayhatwarfare.com - domains - How to search URLs exposed by Shortener services
- whoisology.com - Deep Connections Between Domain Names & Their Owners
- who.is - WHOIS Search, Domain Name, Website, and IP Tools
- pentest-tools.com - Discover subdomains and determine the attack surface of an organization
- BuiltWith - Find out what websites are Built With
- MoonSearch - Backlinks checker & SEO Report
- sitereport.netcraft.com - Find out the infrastructure and technologies used by any site
- statscrop.com - Millions of amazing websites across the web are being analyzed with StatsCrop
- securityheaders.com - Scan your site now
- similarweb.com - The easiest and fastest tool to find out what's really going on online
- buckets.grayhatwarfare.com - Public buckets
- C99.nl - Over 57 quality API's and growing
- wannabe1337.xyz - Online Tools
- subdomainfinder.c99.nl - Scanner that scans an entire domain to find as many subdomains as possible
- AnubisDB - Subdomain enumeration and information gathering tool
- HypeStat - Free statistics and analytics service, where you can find information about every website
- Private Key Project - Information security tools from Private Key Project
- SiteDossier - Profiles for millions of sites on the web
- SpyOnWeb - Quick and convenient search for the websites that probably belong to the same owner
- HaveIBeenSquatted - Check if a domain has been typosquatted
- URLScan - A sandbox for the web
- HackerTarget - Collect information about IP Addresses, Networks, Web Pages and DNS records
- MOZ Link Explorer - The world's best backlink checker with over 40 trillion links
- shorteners.grayhatwarfare.com - Search URLs exposed by Shortener services
- CommonCrawl Index - Open repository of web crawl data
- URLVoid - Check the online reputation/safety of a website
- Norton SafeWeb - Look up a site, Get our rating
- DNSDumpster - DNS recon & research, find & lookup dns records
- Chaos - Enhance research and analyse changes around DNS for better insights
- RapidDNS - DNS query tool which make querying subdomains or sites of a same ip easy
- Omnisint - Reverse DNS lookup
- passivedns.mnemonic.no - Web interface for querying passive DNS data collected in our malware lab
- ptrarchive.com - Over 230 billion reverse DNS entries from 2008 to the present
- DNSTwister - The anti-phishing domain name search engine and DNS monitoring service
- DNSviz - Tool for visualizing the status of a DNS zone
- DNSlytics - Find out everything about a domain name, IP address or provider
- dnsrepo.noc.org - DNS Database Repository Search
- DNSSpy - Monitor, validate and verify your DNS configurations
- ZETAlytics - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts
- AskDNS - Lookup Connected Domain Names and IP Addresses
- 360 PassiveDNS.CN - Biggest public available db in China designed for security and research purpose
- MXtoolbox - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool
- NSLookup.io - Find all DNS records for a domain name using this online tool
- Robtex DNS Lookup - Get detailed information on the nameservers associated with a domain name
- DNSMap - Worldwide DNS Propagation Checker
- Validin - Massive collection of DNS records with free DNS history search
- Crt.sh - Certificate Search
- CTSearch - Certificate Transparency Search Tool
- tls.bufferover.run - Quickly find certificates in IPv4 space
- CertSpotter - Monitors your domains for expiring, unauthorized, and invalid SSL certificates
- Censys Search - Certificates - Certificates Search
- ciphersuite.info - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format
- certificatedetails - Online certificate viewer. Inspect and download certificates from your browser
- FacebookCT - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates
- certs.io - Search TLS certificates across the internet.
- Wigle.net - Maps and database of 802.11 wireless networks with statistics
- wifimap.io - Connect to all Free WiFi Hotspots using WiFi Map App all over the World!
- wificafespots.com - Free WiFi Cafe Spots
- wifispc.com - Free map of Wi-Fi passwords anywhere you go!
- openwifimap.net - HTML5 map with OpenWiFiMap data
- mylnikov.org - Public API implementation of Wi-Fi Geo-Location database
- MACVendorLookup.com - Look up the vendor for a specific MAC Address
- macvendors.com - Find MAC Address Vendors. Now
- maclookup.app - Find the vendor name of a device by entering an OUI or a MAC address
- macvendors.co - Get vendor name of your network device using its mac address
- Have I Been Pwned - Check if your email or phone is in a data breach
- Dehashed - Free deep-web scans and protection against credential leaks