infrastrukt / awesome-hacker-search-engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

Awesome Hacker Search Engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Mail addresses • Domains • URLs • DNS • Certificates • WiFi networks • Credentials • Social Networks • Phone numbers • Threat Intelligence • Web History

General Search Engines

• Google
• Bing
• Yahoo!
• Yandex

Servers

• Shodan - Search Engine for the Internet of Everything
• Censys
• Onyphe.io
• ZoomEye
• GreyNoise
• Natlas
• FOFA

Vulnerabilities

• NIST NVD
• MITRE CVE
• osv.dev - Open Source Vulnerabilities
• Vulners.com
• Rapid7 - DB
• CVEDetails

Exploits

• Exploit-DB
• Sploitus
• Rapid7 - DB

Attack Surface

• FullHunt.io
• BynaryEdge
• RedHunt Labs
• SecurityTrails

Code Search Engines

• GitHub Code Search
• grep.app
• publicwww.com
• SearchCode
• NerdyData
• RepoSearch

Mail addresses

• Hunter.io
• PhoneBook
• IntelligenceX
• Reacher.email
• RocketReach
• email-format.com
• EmailHippo
• ThatsThem - Reverse email lookup
• verify-email.org
• Melissa - Emailcheck
• VoilaNorbert
• skymem.info

Domains

• PhoneBook
• IntelligenceX
• Omnisint - Subdomain enumeration
• Riddler
• RobTex
• CentralOps - DomainDossier
• DomainIQ
• whois.domaintools.com
• whoisology.com
• who.is
• pentest-tools.com
• BuiltWith
• MoonSearch
• sitereport.netcraft.com
• statscrop.com
• securityheaders.com
• visualsitemapper.com
• similarweb.com
• buckets.grayhatwarfare.com - Public buckets

URLs

• PhoneBook
• IntelligenceX
• URLScan
• HackerTarget
• MOZ Link Explorer
• spyonweb.com

DNS

• DNSDumpster
• RapidDNS
• DNSdb
• Omnisint - Reverse DNS lookup
• HackerTarget
• passivedns.mnemonic.no
• ptrarchive.com
• dnshistory.org
• DNSTwister
• DNSviz

Certificates

• Crt.sh
• CTSearch
• TLS.BufferOver.run
• CertSpotter

WiFi networks

• Wigle.net

Credentials

• Have I Been Pwned
• Dehashed
• Leak-Lookup
• Snusbase
• LeakCheck.io

Social Networks

These can be useful for osint and social engineering.

• Facebook
• Instagram
• YouTube
• Twitter
• LinkedIn
• Reddit
• Pinterest
• Tumblr
• Flickr
• SnapChat
• Whatsapp
• Quora
• TikTok
• Vimeo
• Medium
• WeChat
• VK
• Weibo
• Tinder

Phone numbers

• RocketReach
• NumLookup
• WhitePages
• National Cellular Directory
• Phone Validator
• Free Carrier Lookup
• sync.me
• EmobileTracker
• SpyDialer
• Reverse Phone Lookup
• ThatsThem - Reverse phone lookup
• thisnumber.com
• usphonebook.com
• truecaller.com
• truepeoplesearch.com

Threat Intelligence

• PulseDive
• ThreatCrowd
• ThreatMiner
• VirusTotal
• Rescure
• otx.alienvault
• urlquery.net

Web History

• Web Archive
• Archive.ph
• CachedPages
• stored.website

Unclassified

• SynapsInt
• Spyse
• NetoGraph
• DNS.BufferOver.run
• C99.nl
• Chaos
• CommonCrawl
• PassiveTotal

---

If you want to propose changes, just open an issue.