Cybersecurity

Attack Surface & Asset Discovery

These engines identify internet-facing assets, open ports, and infrastructure components.

• Censys (censys.io): Internet asset discovery platform.

• Fofa (www.fofa.info): Cyberspace asset mapping engine.

• FullHunt (fullhunt.io): Attack surface discovery platform.

• Netlas (www.netlas.io): Attack surface discovery platform.

• Onyphe (www.onyphe.io): Cyber defense search engine.

• Shodan (www.shodan.io): IoT device search engine.

• ZoomEye (www.zoomeye.org): Cyberspace search engine for devices.

Threat Intelligence & Malware Analysis

Tools designed to track malicious activity, analyze files, and monitor internet "noise."

• BinaryEdge (www.binaryedge.io): Threat intelligence data platform.

• GreyNoise (www.greynoise.io): Internet noise and threat intelligence.

• PolySwarm (polyswarm.io): Threat detection marketplace.

• Pulsedive (pulsedive.com): Threat intelligence search engine.

• VirusTotal (www.virustotal.com): Malware analysis and file scanning.

Vulnerabilities & Exploits

Databases used to research known software flaws and available exploit code.

• Exploit-DB (www.exploit-db.com): Exploit and vulnerability archive.

• Vulners (vulners.com): Vulnerability database and search engine.

DNS, Domains & Certificates

Platforms focused on infrastructure mapping, historical records, and encryption certificates.

• Crt.sh (crt.sh): Certificate transparency search engine.

• DNSDB (www.dnsdb.info): Historical DNS data search.

• DNSDumpster (dnsdumpster.com): DNS reconnaissance and research tool.

• SecurityTrails (securitytrails.com): DNS and domain data platform.

Data Leaks & OSINT

Services that track exposed credentials, leaked information, and publicly accessible storage.

• Criminal IP (www.criminalip.io): Asset inventory and risk assessment.

• DeHashed (www.dehashed.com): Leaked credentials search engine.

• GrayhatWarfare (grayhatwarfare.com): Public S3 buckets search engine.

• IntelX (intelx.io): OSINT and data breach search.

• LeakIX (leakix.net): Information leaks search engine.

Code & Web Analysis

Tools for searching source code, historical web data, and performing URL scans.

• Grep.app (grep.app): Code search engine for GitHub.

• Hunter.io (hunter.io): Email address finder tool.

• PublicWWW (publicwww.com): Source code search engine.

• SearchCode (searchcode.com): Source code and API search engine.

• URLScan (urlscan.io): Website and URL scanning service.

• Wayback Machine (archive.org/web): Historical web page archive.

Specialized Tools

Tools focusing on wireless networks, advanced search techniques, or general security resources.

• DorkSearch (www.dorksearch.com): Google dorking search tool.

• Packet Storm (www.packetstormsecurity.com): Security tools and resources.

• WiGLE (wigle.net): Wireless network mapping platform.