edoardottt/awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
<h1 align="center"> <b>Awesome Hacker Search Engines</b> <img src="https://raw.githubusercontent.com/edoardottt/images/main/awesome-hacker-search-engines/awesome.svg"/> </h1> <p align="center"> A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more </p> <p align="center"> <a href="#general-search-engines">General</a> • <a href="#servers">Servers</a> • <a href="#vulnerabilities">Vulnerabilities</a> • <a href="#exploits">Exploits</a> • <a href="#attack-surface">Attack surface</a> • <a href="#code">Code</a> • <a href="#email-addresses">Email addresses</a> • <a href="#domains">Domains</a> • <a href="#urls">URLs</a> • <a href="#dns">DNS</a> • <a href="#certificates">Certificates</a> • <a href="#wifi-networks">WiFi networks</a> • <a href="#device-information">Device Info</a> • <a href="#credentials">Credentials</a> • <a href="#leaks">Leaks</a> • <a href="#hidden-services">Hidden Services</a> • <a href="#social-networks">Social Networks</a> • <a href="#phone-numbers">Phone numbers</a> • <a href="#images">Images</a> • <a href="#threat-intelligence">Threat Intelligence</a> • <a href="#web-history">Web History</a> • <a href="#files">Files</a> • <a href="#surveillance-cameras">Surveillance cameras</a> • <a href="#crypto">Crypto</a> • <a href="#people">People</a> • <a href="#vehicle">Vehicle</a> </p> ### General Search Engines - [Google](https://www.google.com/) - [Bing](https://www.bing.com/) - [Yahoo!](http://www.yahoo.com/) - [Yandex](https://yandex.com/) - [Ask](https://www.ask.com/) - [Baidu](https://www.baidu.com/) - [SearXNG](https://searx.be/?q=) - [EXALead](http://www.exalead.com/search/web/) - [DuckDuckGo](https://duckduckgo.com/) - [Swisscows](https://swisscows.com/en) - [Naver](https://www.naver.com/) - [AOL](https://search.aol.com) - [Brave](https://search.brave.com/) - [Yep](https://yep.com/) - [Gibiru](https://gibiru.com/) - [Kagi](https://kagi.com/) - [Stract](https://stract.com/) ### Servers - [Shodan](https://shodan.io) - Search Engine for the Internet of Everything - [Censys Search](https://search.censys.io/) - Search Engine for every server on the Internet to reduce exposure and improve security - [Onyphe.io](https://www.onyphe.io/) - Cyber Defense Search Engine for open-source and cyber threat intelligence data - [ZoomEye](https://www.zoomeye.org/) - Global cyberspace mapping - [GreyNoise](https://viz.greynoise.io/) - The source for understanding internet noise - [Natlas](https://natlas.io/) - Scaling Network Scanning - [Netlas.io](https://netlas.io/) - Discover, Research and Monitor any Assets Available Online - [FOFA](https://fofa.info/) - Cyberspace mapping - [Quake](https://quake.360.net/quake/#/index) - Cyberspace surveying and mapping system - [Hunter](https://hunter.how/) - Internet Search Engines For Security Researchers - [ODIN](https://getodin.com/) - One of the most powerful search engines for Scanned Internet Assets - [Modat Magnify](https://magnify.modat.io/) - The Largest Internet Device DNA Dataset Available ### Vulnerabilities - [NIST NVD](https://nvd.nist.gov/vuln/search) - US National Vulnerability Database - [MITRE CVE](https://cve.mitre.org/cve/search_cve_list.html) - Identify, define, and catalog publicly disclosed cybersecurity vulnerabilities - [GitHub Advisory Database](https://github.com/advisories) - Security vulnerability database inclusive of CVEs and GitHub originated security advisories - [cloudvulndb.org](https://www.cloudvulndb.org/) - The Open Cloud Vulnerability & Security Issue Database - [osv.dev](https://osv.dev/list) - Open Source Vulnerabilities - [Vulners.com](https://vulners.com/) - Your Search Engine for Security Intelligence - [opencve.io](https://www.opencve.io/cve) - Easiest way to track CVE updates and be alerted about new vulnerabilities - [security.snyk.io](https://security.snyk.io/) - Open Source Vulnerability Database - [Mend Vulnerability Database](https://www.mend.io/vulnerability-database/) - The largest open source vulnerability DB - [Rapid7 - DB](https://www.rapid7.com/db/) - Vulnerability & Exploit Database - [CVEDetails](https://www.cvedetails.com/) - The ultimate security vulnerability datasource - [VulnIQ](https://vulniq.com/) - Vulnerability intelligence and management solution - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [Aqua Vulnerability Database](https://avd.aquasec.com/) - Vulnerabilities and weaknesses in open source applications and cloud native infrastructure - [Vulmon](https://vulmon.com/) - Vulnerability and exploit search engine - [VulDB](https://vuldb.com/) - Number one vulnerability database - [ScanFactory](https://in.scanfactory.io/cvemon.html) - Realtime Security Monitoring - [Trend Micro Zero Day Initiative](https://www.zerodayinitiative.com/advisories/published/) - Publicly disclosed vulnerabilities discovered by Zero Day Initiative researchers - [Google Project Zero](https://bugs.chromium.org/p/project-zero/issues/list?can=1&q=&sort=-id&colspec=ID%20Type%20Status%20Priority%20Milestone%20Owner%20Summary) - Vulnerabilities including Zero Days - [Trickest CVE Repository](https://github.com/trickest/cve) - Gather and update all available and newest CVEs with their PoC - [cnvd.org.cn](https://www.cnvd.org.cn/) - Chinese National Vulnerability Database - [InTheWild.io](https://inthewild.io/feed) - Check CVEs in our free, open source feed of exploited vulnerabilities - [Vulnerability Lab](https://www.vulnerability-lab.com/) - Vulnerability research, bug bounties and vulnerability assessments - [Red Hat Security Advisories](https://access.redhat.com/security/security-updates/) - Information about security flaws that affect Red Hat products and services in the form of security advisories - [Cisco Security Advisories](https://sec.cloudapps.cisco.com/security/center/publicationListing.x) - Security advisories and vulnerability information for Cisco products, including network equipment and software - [Microsoft Security Response Center](https://msrc.microsoft.com/update-guide/en-us) - Reports of security vulnerabilities affecting Microsoft products and services - [VARIoT](https://www.variotdbs.pl/vulns/) - VARIoT IoT Vulnerabilities Database - [Lambda Watchdog](https://lambdawatchdog.com/) - Your CVE dashboard for AWS Lambda - [cvefeed.io](https://cvefeed.io/) - Comprehensive and up-to-date feed of the latest CVEs, security advisories, and other vulnerabilities - [CVE Crowd](https://cvecrowd.com/) - Keep track of actively discussed CVEs and integrate them into your application or business - [Wiz Vulnerability Database](https://www.wiz.io/vulnerability-database) - A comprehensive resource for monitoring high-profile vulnerabilities in cloud environments, tailored for security teams and cloud professionals - [Shodan CVEDB](https://cvedb.shodan.io/) - The CVEDB API offers a quick way to check information about vulnerabilities in a service - [Vulert](https://vulert.com/vuln-db) - Recent security issues found in open-source packages - [promptfoo.dev Language Model Security Database](https://www.promptfoo.dev/lm-security-db/) - A comprehensive collection of LLM vulnerabilities, curated from cutting-edge research papers and real-world discoveries - [opencryptography.com](https://opencryptography.com/) - Free public database of 10,000+ unique Docker image scans for hidden cryptographic assets and critical implementation flaws - [pathfinding.cloud](https://pathfinding.cloud/paths/) - Comprehensive, community-maintained library documenting AWS IAM privilege escalation paths - [BaseFortify.eu](https://basefortify.eu/) - Monitor software vulnerabilities with CVE matching, exploit risk alerts, and mitigation guidance - [PatchBell](https://patchbell.com/) - Look up which version fixes a vulnerability, per distro and host, with official sources checked line by line - [PatchWindow](https://patchwindow.com/) - Time-to-exploit research for every CVE in the CISA Known Exploited Vulnerabilities catalog from 2019 onwards ### Exploits - [Exploit-DB](https://www.exploit-db.com/) - Exploit Database - [Sploitus](https://sploitus.com/) - Convenient central place for identifying the newest exploits - [Rapid7 - DB](https://www.rapid7.com/db/) - Vulnerability & Exploit Database - [Vulmon](https://vulmon.com/) - Vulnerability and exploit search engine - [packetstormsecurity.com](https://packetstormsecurity.com/) - Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers - [Living Off The Land Binaries, Scripts and Libraries](https://lolbas-project.github.io/) - Living Off The Land Binaries, Scripts and Libraries - [GTFOBins](https://gtfobins.github.io/) - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems - [Payloads All The Things](https://swisskyrepo.github.io/PayloadsAllTheThings/) - A list of useful payloads and bypasses for Web Application Security - [XSS Payloads](http://www.xss-payloads.com/) - The wonderland of JavaScript unexpected usages, and more - [exploitalert.com](https://www.exploitalert.com/search-results.html) - Database of Exploits - [Reverse Shell generator](https://www.revshells.com/) - Online Reverse Shell generator with Local Storage functionality, URI & Base64 Encoding, MSFVenom Generator, and Raw Mode - [HackerOne hacktivity](https://hackerone.com/hacktivity) - See the latest hacker activity on HackerOne - [Bugcrowd Crowdstream](https://bugcrowd.com/crowdstream) - Showcase of accepted and disclosed submissions on Bugcrowd programs - [GTFOArgs](https://gtfoargs.github.io/) - Curated list of Unix binaries that can be manipulated for argument injection - [shell-storm.org/shellcode](https://shell-storm.org/shellcode/index.html) - Shellcodes database for study cases - [Hacking the Cloud](https://hackingthe.cloud/) - Encyclopedia of the attacks/tactics/techniques that offensive security professionals can use on their next cloud exploitation adventure - [Living Off The Land Drivers](https://www.loldrivers.io/) - Open-source project that brings together vulnerable, malicious, and known malicious Windows drivers - [PwnWiki](http://pwnwiki.io/) - Collection of TTPs (tools, tactics, and procedures) for what to do after access has been gained - [CVExploits Search](https://cvexploits.io/) - Your comprehensive database for CVE exploits from across the internet - [VARIoT](https://www.variotdbs.pl/exploits/) - VARIoT IoT exploits database - [Living Off the Orchard: macOS Binaries](https://www.loobins.io/) - Detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes - [Coalition Exploit Scoring System](https://ess.coalitioninc.com/) - Model that dynamically scores new and existing vulnerabilities to reflect their exploit likelihood - [WADComs](https://wadcoms.github.io/) - Interactive cheat sheet containing a curated list of offensive security tools and their respective commands to be used against Windows/AD environments - [Living Off The Land Applications](https://lolapps-project.github.io/) - Compendium of applications that can be used to carry out day-to-day exploitation - [Living off the Hardware](https://lothardware.com.tr/) - Resource collection that provides guidance on identifying and utilizing malicious hardware and malicious devices - [Living Off the Pipeline](https://boostsecurityio.github.io/lotp/) - How development tools commonly used in CI/CD pipelines can be used to achieve arbitrary code execution - [hackyx.io](https://hackyx.io/) - The aim of this project is to easily find any resource related to IT security like CTF writeups, articles or Bug Bounty reports - [exploit.observer](https://www.exploit.observer/) - The World's Largest Exploit & Vulnerability Intelligence Database and is freely accessible to all - [VulnCheck XDB](https://vulncheck.com/xdb/) - An index of exploit proof-of-concept code in Git repositories - [Sploitify](https://sploitify.haxx.it/) - Interactive cheat sheet, containing a curated list of public server-side exploits (mostly) - [Living Off The Land ESXi](https://lolesxi-project.github.io/LOLESXi/) - Comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their operations - [Living Off The Land and Exploitation Active Directory](https://lolad-project.github.io/) - Comprehensive collection of Active Directory techniques, commands, and functions that can be used natively to support offensive security operations and Red Team exercises - [Living Off The Land Security Tools](https://0xanalyst.github.io/Project-Lost/) - Curated list of Security Tools used by adversaries to bypass security controls and carry out attacks - [cspbypass.com](https://cspbypass.com/) - Search for Content Security Policy Bypasses - [Living Off The Tunnels](https://lottunnels.github.io/#) - Community driven project to document digital tunnels that can be abused by threat actors as well by insiders for data exfiltrations, persistence, shell access etc - [LOLGlobs](https://0xv1n.github.io/LOLGlobs/) - A searchable catalog of glob-based command obfuscation techniques for Linux, macOS, Windows CMD, and PowerShell - [CVE PoC Search jamessawyer.co.uk](https://labs.jamessawyer.co.uk/cves/) - Search public GitHub repositories containing proof-of-concept exploit code, indexed by CVE identifier - [1dayexploit.com](https://1dayexploit.com/) - We turn CVE claims into evidence and go past the single bug to the techniques behind it ### Attack Surface - [FullHunt.io](https://fullhunt.io/) - Attack surface database of the entire Internet - [BinaryEdge](https://www.binaryedge.io/) - We scan the web and gather data for you - [Censys ASM](https://censys.io/) - Attack Surface Management Solutions - [RedHunt Labs](https://redhuntlabs.com/) - Discover your Attack Surface, Continuously - [SecurityTrails](https://securitytrails.com/) - The Total Internet Inventory - [overcast-security.com](https://overcast-security.com/) - We make tracking your external attack surface easy - [IPInfo.io](https://ipinfo.io/) - The trusted source for IP address data - [IPData.co](https://ipdata.co/) - IP Geolocation and Threat Intelligence API - [NetworksDB](https://networksdb.io/) - Information about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organisations across the world - [ASNlookup](https://asnlookup.com/) - Quickly lookup updated information about specific Autonomous System Number (ASN), Organization, CIDR, or registered IP addresses (IPv4 and IPv6) among other relevant data - [BGPtools](https://bgp.tools/) - Browse the Internet ecosystem - [BGPview](https://bgpview.io/) - Debug and investigate information about IP addresses, ASN, IXs, BGP, ISPs, Prefixes and Domain names - [BigDataCloud](https://www.bigdatacloud.com/) - The API provides comprehensive location and network data - [RADb](https://www.radb.net/query) - The world's largest public routing registry - [Deepinfo](https://www.deepinfo.com/) - Empower your security with the most comprehensive Internet data - [CloudFlare Radar](https://radar.cloudflare.com/) - Global Internet traffic, attack, and technology trends and insights - [IPIP](https://en.ipip.net/) - The only IP Database based on real time BGP/ASN data analytics - [Hurricane Electric BGP](https://bgp.he.net/) - The Hurricane Electric BGP Toolkit is free to use. Look up ASN from IP address - [Webscout](https://webscout.io/) - From threat intelligence to attack surface discovery, asset management, and brand protection - [Awseye](https://awseye.com/) - Open-source intelligence (OSINT) and reconnaissance service tracking publicly accessible AWS data - [S4E](https://app.s4e.io/) - Continuous Threat Exposure Management platform that offers a web-based cybersecurity solution for comprehensive scanning and vulnerability detection of digital assets like domains, subdomains, IP addresses, and web apps - [ipquery.io](https://ipquery.io/) - The IP Address API for Developers - [domaincodex.com](https://www.domaincodex.com/) - Research 500m+ root domain information and all associated data, including records, IP address, page metadata and much more - [APIfreaks.com](https://apifreaks.com/) - Unified API hub providing DNS, WHOIS, IP geolocation, screenshots and commodity data APIs for developers and security teams - [HackMyIP](https://hackmyip.com/) - Free privacy and security toolkit with 19+ tools including IP lookup, DNS lookup, DNS leaks test and many others - [lookup.disclose.io](https://lookup.disclose.io/) - Find who owns any internet asset and the right security & disclosure contact - [db-ip](https://db-ip.com/) - IP geolocation API and database - [pureip.app](https://pureip.app) - IP lookups, website egress routing, WebRTC checks, global Ping, service status and WHOIS lookups - [IP99](https://ip99.com) - IP risk scoring, proxy/VPN/datacenter detection and geolocation API, with passive DNS and certificate transparency ### Code - [GitHub Code Search](https://github.com/search?type=code) - Search globally across all of GitHub, or scope your search to a particular repository or organization - [GitLab Code Search](https://gitlab.com/) - Advanced search for faster, more efficient search across the entire GitLab instance - [Sourceforge](https://sourceforge.net/) - Complete Open-Source and Business Software Platform - [grep.app](https://grep.app/) - Search across a half million git repos - [publicwww.com](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code - [SearchCode](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects - [NerdyData](https://www.nerdydata.com/) - Find companies based on their website's tech stack or code - [RepoSearch](http://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code - [SourceGraph](https://about.sourcegraph.com/) - Understand and search across your entire codebase - [HotExamples](https://hotexamples.com/) - Search code examples from over 1 million projects - [WP Directory](https://wpdirectory.net/) - Lightning fast regex searching of code in the WordPress Plugin and Theme Directories - [GitHub Gists](https://gist.github.com/discover) - Instantly share code, notes, and snippets - [CodeBerg](https://codeberg.org/explore/repos) - Collaboration platform and Git hosting for free and open source software, content and projects - [Fedora Pagure](https://pagure.io/browse/projects/) - Open Source software code hosting system - [LaunchPad](https://launchpad.net/) - Software collaboration platform that provides: Bug tracking, Code hosting, Code reviews, Ubuntu package building and hosting, Translations... - [repo.or.cz](https://repo.or.cz/?a=project_list) - Public Git hosting site - [gitorious.org](https://gitorious.org/) - Read-only mirror of the former gitorious.org code hosting website - [Sourcehut](https://sr.ht/projects) - Collection of tools useful for software development - [android.googlesource.com](https://android.googlesource.com/) - Git repositories on android - [deps.dev](https://deps.dev/) - Service developed and hosted by Google to help developers better understand the structure, construction, and security of open source software packages - [WebFinery](https://webfinery.com/search) - Search the source code of the web - [Google Code Archive](https://code.google.com/archive/) - Data found on the Google Code Project Hosting Service, which was turned down in early 2016 - [Snipplr](https://snipplr.com/all) - Code snippet search engine that allows users to search and share code snippets across various programming languages and frameworks - [Postman Public Collections](https://www.postman.com/explore/collections) - Explore the best APIs, collections, workspaces in the world on the Postman Public API Network - [ScriptMafia](https://scriptmafia.org) - Download full nulled scripts - [SearchFTPs](https://www.searchftps.net/) - The most advanced FTP Search Engine service maintained by members - [Ecosyste.ms](https://ecosyste.ms/) - An open API service providing package, version and dependency metadata of many open source software ecosystems and registries - [SwaggerHub](https://app.swaggerhub.com/search) - Search public APIs and Domains in SwaggerHub - [RapidAPI Public Hub](https://rapidapi.com/hub) - Explore the world's largest API marketplace - [Repogrep](https://app.ami.dev/repogrep) - AI coding agent that can search across any public GitHub repository - [SearchWebCode](https://www.searchwebcode.com/) - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages - [PageSourceSearch](https://www.pagesourcesearch.com/) - Search the HTML and first-party JavaScript of websites by exact string or regular expression - [Related Repos](https://relatedrepos.com/) - Discover related open source projects. Find alternatives and other similar repositories. Updated daily. ### Email Addresses - [Hunter.io](https://hunter.io/) - Find professional email addresses in seconds - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [Reacher.email](https://reacher.email/) - Open-Source Email Verification - [RocketReach](https://rocketreach.co/) - Your first-degree connection to any professional - [email-format.com](https://www.email-format.com/) - Find the email address formats in use at thousands of companies - [EmailHippo](https://tools.emailhippo.com/) - Email address verification technology - [ThatsThem](https://thatsthem.com/reverse-email-lookup) - Reverse email lookup - [verify-email.org](https://verify-email.org/) - Checks whether the mailbox exists or not - [Melissa - Emailcheck](https://www.melissa.com/v2/lookups/emailcheck/email/) - Check email addresses and verify they are live - [VoilaNorbert](https://www.voilanorbert.com/) - I can find anyone's email address - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [skymem.info](http://www.skymem.info/) - Find email addresses of companies and people - [findemails.com](https://www.findemails.com/) - Find Anyone's Email Address in Seconds - [Experte email finder](https://www.experte.com/email-finder) - Find the right email address, even if you only know the name and the company - [EmailSherlock](https://www.emailsherlock.com/) - Search for the Person behind the Email address and find our reputation score - [Anymail Finder](https://anymailfinder.com/) - Find verified emails - [Tomba.io](https://tomba.io/) - With 430+ million email addresses indexed, effective search filters, and deliverability checks, Tomba's email finder is its most powerful tool - [Snov Email Finder](https://snov.io/email-finder) Find any email. Anywhere - [EmailSearch.io](https://emailsearch.io/) - Find any emails and phones from a domain, Linkedin, name, and company - [Email Permutator+](http://metricsparrow.com/toolkit/email-permutator/#) - Find potential email addresses permutating different combinations - [Emailrep.io](https://emailrep.io/) - Simple Email Reputation - [Mailboxvalidator](https://www.mailboxvalidator.com/) - Secure and reliable email validation service to check for invalid email addresses - [ContactOut](https://contactout.com/) - Most accurate email finder for personal and work email outreach - [validemail.io](https://validemail.io/) - Validate email addresses for deliverability with our Email Validation API - [Predicta Search](https://www.predictasearch.com/) - Reverse lookup search engine for email and phone numbers - [Infoga.io](https://www.infoga.io/) - Find out all email for a certain domain using search engines ### Domains - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [Omnisint](https://omnisint.io/subdomain-enumeration) - Subdomain enumeration - [RobTex](https://www.robtex.com/) - Various kinds of research of IP numbers, Domain names, etc - [CentralOps - DomainDossier](https://centralops.net/co/DomainDossier.aspx) - Investigate domains and IP addresses - [DomainIQ](https://www.domainiq.com/) - Comprehensive Domain Intelligence - [whois.domaintools.com](https://whois.domaintools.com/) - Industry’s fastest domain discovery engine and broadest, most accurate data - [grayhatwarfare.com - domains](https://shorteners.grayhatwarfare.com/domains) - How to search URLs exposed by Shortener services - [whoisology.com](https://whoisology.com/) - Deep Connections Between Domain Names & Their Owners - [who.is](https://who.is/) - WHOIS Search, Domain Name, Website, and IP Tools - [pentest-tools.com](https://pentest-tools.com/information-gathering/find-subdomains-of-domain) - Discover subdomains and determine the attack surface of an organization - [BuiltWith](https://builtwith.com/) - Find out what websites are Built With - [MoonSearch](http://moonsearch.com/) - Backlinks checker & SEO Report - [sitereport.netcraft.com](https://sitereport.netcraft.com/) - Find out the infrastructure and technologies used by any site - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [statscrop.com](https://www.statscrop.com/) - Millions of amazing websites across the web are being analyzed with StatsCrop - [securityheaders.com](https://securityheaders.com/) - Scan your site now - [visualsitemapper.com](http://www.visualsitemapper.com/) - Create a visual map of your site - [similarweb.com](https://www.similarweb.com/) - The easiest and fastest tool to find out what's really going on online - [buckets.grayhatwarfare.com](https://buckets.grayhatwarfare.com/) - Public buckets - [C99.nl](https://api.c99.nl/) - Over 57 quality API's and growing! - [wannabe1337.xyz](https://wannabe1337.xyz/) - Online Tools - [subdomainfinder.c99.nl](https://subdomainfinder.c99.nl/) - Scanner that scans an entire domain to find as many subdomains as possible - [AnubisDB](https://jonlu.ca/anubis/) - Subdomain enumeration and information gathering tool - [HypeStat](https://hypestat.com/) - Free statistics and analytics service, where you can find information about every website - [Private Key Project](https://www.pkey.in/tools-i/search-subdomains) - Information security tools from Private Key Project - [SiteDossier](http://www.sitedossier.com/) - Profiles for millions of sites on the web - [SpyOnWeb](https://spyonweb.net/) - Quick and convenient search for the websites that probably belong to the same owner - [HaveIBeenSquatted](https://www.haveibeensquatted.com/) - Check if a domain has been typosquatted - [expireddomains.net](https://www.expireddomains.net/) - ExpiredDomains.net gathers all the information you need to find good Expired Domains that are Pending Delete and you can Backorder - [SubDomainRadar.io](https://subdomainradar.io) - Discover hidden subdomains with unparalleled accuracy and speed - [Google Safe Browsing](https://transparencyreport.google.com/safe-browsing/search) - Google's Safe Browsing technology examines billions of URLs per day looking for unsafe websites - [WHOISFreaks.com](https://whoisfreaks.com/) - Unleash the Power of Data with Our Domain and IP Intelligence - [ip.THC.org](https://ip.thc.org/) - Reverse DNS, Subdomains and CNAMEs Lookup - [Tenant Domain Finder](https://domains.ourcloudnetwork.com/) - Find All Domains in a Microsoft 365 Tenant - [NetCraft SearchDNS](https://searchdns.netcraft.com/) - Search Web by Domain - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning - [DomScan](https://domscan.net/tools/security) - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting - [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR) - [ctr.name](https://crt.name/) - Give it an apex domain and you get every subdomain on file - [Argos OSINT Dominio](https://argos-osint.com/dominio/) - Free unified domain intel dashboard combining WHOIS/RDAP, DoH DNS resolution and subdomain enumeration - [MerkleMap](https://www.merklemap.com/) - Discover subdomains and SSL/TLS certificates from Certificate Transparency logs - [Fraudpol Scan](https://fraudpol.com/scan) - Find registered lookalike domains of a brand via certificate transparency logs - [StackScan](https://www.stackscan.com/) - Search sites by technology, keyword, or the files and assets they serve - [NetAPI](https://netapi.com/) - Download domain lists, WHOIS and DNS datasets and newly registered domains, manually or via API ### URLs - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [URLScan](https://urlscan.io/) - A sandbox for the web - [HackerTarget](https://hackertarget.com/ip-tools/) - Collect information about IP Addresses, Networks, Web Pages and DNS records - [MOZ Link Explorer](https://moz.com/link-explorer) - The world's best backlink checker with over 40 trillion links - [shorteners.grayhatwarfare.com](https://shorteners.grayhatwarfare.com/) - Search URLs exposed by Shortener services - [CommonCrawl Index](http://index.commoncrawl.org/) - Open repository of web crawl data - [URLVoid](https://www.urlvoid.com/) - Check the online reputation/safety of a website - [Norton SafeWeb](https://safeweb.norton.com/) - Look up a site, Get our rating - [CheckPhish](https://checkphish.bolster.ai/) - Real-time URL and website scanner - [web-check.xyz](https://web-check.xyz/) - All-in-one OSINT tool, for quickly checking a websites data - [TinyScan](https://www.tiny-scan.com/) - Effortlessly Dive into URL Details - [urldna.io](https://urldna.io/) - Unleash website insights! urldna.io analyzes data, monitors brands and exposes security risks - [ScanMalware](https://scanmalware.com/) - Scans URLs in a sandboxed browser and indexes the results for search by domain, IP, ASN, JARM and favicon hash ### DNS - [DNSDumpster](https://dnsdumpster.com/) - DNS recon & research, find & lookup dns records - [Chaos](https://chaos.projectdiscovery.io/#/) - Enhance research and analyse changes around DNS for better insights - [RapidDNS](https://rapiddns.io/) - DNS query tool which make querying subdomains or sites of a same ip easy - [DNSdb](https://docs.farsightsecurity.com/#dnsdb) - Passive DNS historical database - [Omnisint](https://omnisint.io/reverse-dns-lookup) - Reverse DNS lookup - [HackerTarget](https://hackertarget.com/ip-tools/) - Collect information about IP Addresses, Networks, Web Pages and DNS records - [passivedns.mnemonic.no](https://passivedns.mnemonic.no/) - Web interface for querying passive DNS data collected in our malware lab - [ptrarchive.com](http://ptrarchive.com/) - Over 230 billion reverse DNS entries from 2008 to the present - [dnshistory.org](http://dnshistory.org/) - Domain Name System Historical Record Archive - [DNSTwister](https://dnstwister.report/) - The anti-phishing domain name search engine and DNS monitoring service - [DNSviz](https://dnsviz.net/) - Tool for visualizing the status of a DNS zone - [C99.nl](https://api.c99.nl/) - Over 57 quality API's and growing - [wannabe1337.xyz](https://wannabe1337.xyz/) - Online Tools - [DNSlytics](https://dnslytics.com/) - Find out everything about a domain name, IP address or provider - [dnsrepo.noc.org](https://dnsrepo.noc.org/) - DNS Database Repository Search - [DNSSpy](https://dnsspy.io/) - Monitor, validate and verify your DNS configurations - [ZETAlytics](https://zetalytics.com/) - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts - [360 PassiveDNS.CN](https://passivedns.cn/) - Biggest public available db in China designed for security and research purpose - [MXtoolbox](https://mxtoolbox.com/SuperTool.aspx) - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool --- [Read more](https://github.com/edoardottt/awesome-hacker-search-engines)
