Awesome Hacker Search Engines 
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
General •
Servers •
Vulnerabilities •
Exploits •
Attack surface •
Code •
Email addresses •
Domains •
URLs •
DNS •
Certificates •
WiFi networks •
Device Info •
Credentials •
Leaks •
Hidden Services •
Social Networks •
Phone numbers •
Images •
Threat Intelligence •
Web History •
Files •
Surveillance cameras •
Crypto •
People •
Vehicle
General Search Engines
Servers
- Shodan - Search Engine for the Internet of Everything
- Censys Search - Search Engine for every server on the Internet to reduce exposure and improve security
- Onyphe.io - Cyber Defense Search Engine for open-source and cyber threat intelligence data
- ZoomEye - Global cyberspace mapping
- GreyNoise - The source for understanding internet noise
- Natlas - Scaling Network Scanning
- Netlas.io - Discover, Research and Monitor any Assets Available Online
- FOFA - Cyberspace mapping
- Quake - Cyberspace surveying and mapping system
- Hunter - Internet Search Engines For Security Researchers
- ODIN - One of the most powerful search engines for Scanned Internet Assets
- Modat Magnify - The Largest Internet Device DNA Dataset Available
Vulnerabilities
- NIST NVD - US National Vulnerability Database
- MITRE CVE - Identify, define, and catalog publicly disclosed cybersecurity vulnerabilities
- GitHub Advisory Database - Security vulnerability database inclusive of CVEs and GitHub originated security advisories
- cloudvulndb.org - The Open Cloud Vulnerability & Security Issue Database
- osv.dev - Open Source Vulnerabilities
- Vulners.com - Your Search Engine for Security Intelligence
- opencve.io - Easiest way to track CVE updates and be alerted about new vulnerabilities
- security.snyk.io - Open Source Vulnerability Database
- Mend Vulnerability Database - The largest open source vulnerability DB
- Rapid7 - DB - Vulnerability & Exploit Database
- CVEDetails - The ultimate security vulnerability datasource
- VulnIQ - Vulnerability intelligence and management solution
- SynapsInt - The unified OSINT research tool
- Aqua Vulnerability Database - Vulnerabilities and weaknesses in open source applications and cloud native infrastructure
- Vulmon - Vulnerability and exploit search engine
- VulDB - Number one vulnerability database
- ScanFactory - Realtime Security Monitoring
- Trend Micro Zero Day Initiative - Publicly disclosed vulnerabilities discovered by Zero Day Initiative researchers
- Google Project Zero - Vulnerabilities including Zero Days
- Trickest CVE Repository - Gather and update all available and newest CVEs with their PoC
- cnvd.org.cn - Chinese National Vulnerability Database
- InTheWild.io - Check CVEs in our free, open source feed of exploited vulnerabilities
- Vulnerability Lab - Vulnerability research, bug bounties and vulnerability assessments
- Red Hat Security Advisories - Information about security flaws that affect Red Hat products and services in the form of security advisories
- Cisco Security Advisories - Security advisories and vulnerability information for Cisco products, including network equipment and software
- Microsoft Security Response Center - Reports of security vulnerabilities affecting Microsoft products and services
- VARIoT - VARIoT IoT Vulnerabilities Database
- Lambda Watchdog - Your CVE dashboard for AWS Lambda
- cvefeed.io - Comprehensive and up-to-date feed of the latest CVEs, security advisories, and other vulnerabilities
- CVE Crowd - Keep track of actively discussed CVEs and integrate them into your application or business
- Wiz Vulnerability Database - A comprehensive resource for monitoring high-profile vulnerabilities in cloud environments, tailored for security teams and cloud professionals
- Shodan CVEDB - The CVEDB API offers a quick way to check information about vulnerabilities in a service
- Vulert - Recent security issues found in open-source packages
- promptfoo.dev Language Model Security Database - A comprehensive collection of LLM vulnerabilities, curated from cutting-edge research papers and real-world discoveries
- opencryptography.com - Free public database of 10,000+ unique Docker image scans for hidden cryptographic assets and critical implementation flaws
- pathfinding.cloud - Comprehensive, community-maintained library documenting AWS IAM privilege escalation paths
- BaseFortify.eu - Monitor software vulnerabilities with CVE matching, exploit risk alerts, and mitigation guidance
Exploits
- Exploit-DB - Exploit Database
- Sploitus - Convenient central place for identifying the newest exploits
- Rapid7 - DB - Vulnerability & Exploit Database
- Vulmon - Vulnerability and exploit search engine
- packetstormsecurity.com - Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
- Living Off The Land Binaries, Scripts and Libraries - Living Off The Land Binaries, Scripts and Libraries
- GTFOBins - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
- Payloads All The Things - A list of useful payloads and bypasses for Web Application Security
- XSS Payloads - The wonderland of JavaScript unexpected usages, and more
- exploitalert.com - Database of Exploits
- Reverse Shell generator - Online Reverse Shell generator with Local Storage functionality, URI & Base64 Encoding, MSFVenom Generator, and Raw Mode
- HackerOne hacktivity - See the latest hacker activity on HackerOne
- Bugcrowd Crowdstream - Showcase of accepted and disclosed submissions on Bugcrowd programs
- GTFOArgs - Curated list of Unix binaries that can be manipulated for argument injection
- shell-storm.org/shellcode - Shellcodes database for study cases
- Hacking the Cloud - Encyclopedia of the attacks/tactics/techniques that offensive security professionals can use on their next cloud exploitation adventure
- Living Off The Land Drivers - Open-source project that brings together vulnerable, malicious, and known malicious Windows drivers
- PwnWiki - Collection of TTPs (tools, tactics, and procedures) for what to do after access has been gained
- CVExploits Search - Your comprehensive database for CVE exploits from across the internet
- VARIoT - VARIoT IoT exploits database
- Living Off the Orchard: macOS Binaries - Detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes
- Coalition Exploit Scoring System - Model that dynamically scores new and existing vulnerabilities to reflect their exploit likelihood
- WADComs - Interactive cheat sheet containing a curated list of offensive security tools and their respective commands to be used against Windows/AD environments
- Living Off The Land Applications - Compendium of applications that can be used to carry out day-to-day exploitation
- Living off the Hardware - Resource collection that provides guidance on identifying and utilizing malicious hardware and malicious devices
- Living Off the Pipeline - How development tools commonly used in CI/CD pipelines can be used to achieve arbitrary code execution
- hackyx.io - The aim of this project is to easily find any resource related to IT security like CTF writeups, articles or Bug Bounty reports
- exploit.observer - The World's Largest Exploit & Vulnerability Intelligence Database and is freely accessible to all
- VulnCheck XDB - An index of exploit proof-of-concept code in Git repositories
- Sploitify - Interactive cheat sheet, containing a curated list of public server-side exploits (mostly)
- Living Off The Land ESXi - Comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their operations
- Living Off The Land and Exploitation Active Directory - Comprehensive collection of Active Directory techniques, commands, and functions that can be used natively to support offensive security operations and Red Team exercises
- Living Off The Land Security Tools - Curated list of Security Tools used by adversaries to bypass security controls and carry out attacks
- cspbypass.com - Search for Content Security Policy Bypasses
- Living Off The Tunnels - Community driven project to document digital tunnels that can be abused by threat actors as well by insiders for data exfiltrations, persistence, shell access etc
- LOLGlobs - A searchable catalog of glob-based command obfuscation techniques for Linux, macOS, Windows CMD, and PowerShell
- CVE PoC Search jamessawyer.co.uk - Search public GitHub repositories containing proof-of-concept exploit code, indexed by CVE identifier
- 1dayexploit.com - We turn CVE claims into evidence and go past the single bug to the techniques behind it
Attack Surface
- FullHunt.io - Attack surface database of the entire Internet
- BinaryEdge - We scan the web and gather data for you
- Censys ASM - Attack Surface Management Solutions
- RedHunt Labs - Discover your Attack Surface, Continuously
- SecurityTrails - The Total Internet Inventory
- overcast-security.com - We make tracking your external attack surface easy
- IPInfo.io - The trusted source for IP address data
- IPData.co - IP Geolocation and Threat Intelligence API
- NetworksDB - Information about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organisations across the world
- ASNlookup - Quickly lookup updated information about specific Autonomous System Number (ASN), Organization, CIDR, or registered IP addresses (IPv4 and IPv6) among other relevant data
- BGPtools - Browse the Internet ecosystem
- BGPview - Debug and investigate information about IP addresses, ASN, IXs, BGP, ISPs, Prefixes and Domain names
- BigDataCloud - The API provides comprehensive location and network data
- RADb - The world's largest public routing registry
- Deepinfo - Empower your security with the most comprehensive Internet data
- CloudFlare Radar - Global Internet traffic, attack, and technology trends and insights
- IPIP - The only IP Database based on real time BGP/ASN data analytics
- Hurricane Electric BGP - The Hurricane Electric BGP Toolkit is free to use. Look up ASN from IP address
- Webscout - From threat intelligence to attack surface discovery, asset management, and brand protection
- Awseye - Open-source intelligence (OSINT) and reconnaissance service tracking publicly accessible AWS data
- S4E - Continuous Threat Exposure Management platform that offers a web-based cybersecurity solution for comprehensive scanning and vulnerability detection of digital assets like domains, subdomains, IP addresses, and web apps
- ipquery.io - The IP Address API for Developers
- domaincodex.com - Research 500m+ root domain information and all associated data, including records, IP address, page metadata and much more
- APIfreaks.com - Unified API hub providing DNS, WHOIS, IP geolocation, screenshots and commodity data APIs for developers and security teams
- HackMyIP - Free privacy and security toolkit with 19+ tools including IP lookup, DNS lookup, DNS leaks test and many others
- lookup.disclose.io - Find who owns any internet asset and the right security & disclosure contact
Code
- GitHub Code Search - Search globally across all of GitHub, or scope your search to a particular repository or organization
- GitLab Code Search - Advanced search for faster, more efficient search across the entire GitLab instance
- Sourceforge - Complete Open-Source and Business Software Platform
- grep.app - Search across a half million git repos
- publicwww.com - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
- SearchCode - Search 75 billion lines of code from 40 million projects
- NerdyData - Find companies based on their website's tech stack or code
- RepoSearch - Source code search engine that helps you find implementation details, example usages or just analyze code
- SourceGraph - Understand and search across your entire codebase
- HotExamples - Search code examples from over 1 million projects
- WP Directory - Lightning fast regex searching of code in the WordPress Plugin and Theme Directories
- GitHub Gists - Instantly share code, notes, and snippets
- CodeBerg - Collaboration platform and Git hosting for free and open source software, content and projects
- Fedora Pagure - Open Source software code hosting system
- LaunchPad - Software collaboration platform that provides: Bug tracking, Code hosting, Code reviews, Ubuntu package building and hosting, Translations...
- repo.or.cz - Public Git hosting site
- gitorious.org - Read-only mirror of the former gitorious.org code hosting website
- Sourcehut - Collection of tools useful for software development
- android.googlesource.com - Git repositories on android
- deps.dev - Service developed and hosted by Google to help developers better understand the structure, construction, and security of open source software packages
- WebFinery - Search the source code of the web
- Google Code Archive - Data found on the Google Code Project Hosting Service, which was turned down in early 2016
- Snipplr - Code snippet search engine that allows users to search and share code snippets across various programming languages and frameworks
- Postman Public Collections - Explore the best APIs, collections, workspaces in the world on the Postman Public API Network
- ScriptMafia - Download full nulled scripts
- SearchFTPs - The most advanced FTP Search Engine service maintained by members
- Ecosyste.ms - An open API service providing package, version and dependency metadata of many open source software ecosystems and registries
- SwaggerHub - Search public APIs and Domains in SwaggerHub
- RapidAPI Public Hub - Explore the world's largest API marketplace
- Repogrep - AI coding agent that can search across any public GitHub repository
- SearchWebCode - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages
Email Addresses
- Hunter.io - Find professional email addresses in seconds
- PhoneBook - Lists all domains, email addresses, or URLs for the given input domain
- IntelligenceX - Search engine and data archive
- Reacher.email - Open-Source Email Verification
- RocketReach - Your first-degree connection to any professional
- email-format.com - Find the email address formats in use at thousands of companies
- EmailHippo - Email address verification technology
- ThatsThem - Reverse email lookup
- verify-email.org - Checks whether the mailbox exists or not
- Melissa - Emailcheck - Check email addresses and verify they are live
- VoilaNorbert - I can find anyone's email address
- SynapsInt - The unified OSINT research tool
- skymem.info - Find email addresses of companies and people
- findemails.com - Find Anyone's Email Address in Seconds
- Experte email finder - Find the right email address, even if you only know the name and the company
- EmailSherlock - Search for the Person behind the Email address and find our reputation score
- Anymail Finder - Find verified emails
- Tomba.io - With 430+ million email addresses indexed, effective search filters, and deliverability checks, Tomba's email finder is its most powerful tool
- Snov Email Finder Find any email. Anywhere
- EmailSearch.io - Find any emails and phones from a domain, Linkedin, name, and company
- Email Permutator+ - Find potential email addresses permutating different combinations
- Emailrep.io - Simple Email Reputation
- Mailboxvalidator - Secure and reliable email validation service to check for invalid email addresses
- ContactOut - Most accurate email finder for personal and work email outreach
- validemail.io - Validate email addresses for deliverability with our Email Validation API
- Predicta Search - Reverse lookup search engine for email and phone numbers
- Infoga.io - Find out all email for a certain domain using search engines
Domains
- PhoneBook - Lists all domains, email addresses, or URLs for the given input domain
- IntelligenceX - Search engine and data archive
- Omnisint - Subdomain enumeration
- Riddler - Allows you to search in a high quality dataset
- RobTex - Various kinds of research of IP numbers, Domain names, etc
- CentralOps - DomainDossier - Investigate domains and IP addresses
- DomainIQ - Comprehensive Domain Intelligence
- whois.domaintools.com - Industry’s fastest domain discovery engine and broadest, most accurate data
- grayhatwarfare.com - domains - How to search URLs exposed by Shortener services
- whoisology.com - Deep Connections Between Domain Names & Their Owners
- who.is - WHOIS Search, Domain Name, Website, and IP Tools
- pentest-tools.com - Discover subdomains and determine the attack surface of an organization
- BuiltWith - Find out what websites are Built With
- MoonSearch - Backlinks checker & SEO Report
- sitereport.netcraft.com - Find out the infrastructure and technologies used by any site
- SynapsInt - The unified OSINT research tool
- statscrop.com - Millions of amazing websites across the web are being analyzed with StatsCrop
- securityheaders.com - Scan your site now
- visualsitemapper.com - Create a visual map of your site
- similarweb.com - The easiest and fastest tool to find out what's really going on online
- buckets.grayhatwarfare.com - Public buckets
- C99.nl - Over 57 quality API's and growing!
- wannabe1337.xyz - Online Tools
- subdomainfinder.c99.nl - Scanner that scans an entire domain to find as many subdomains as possible
- AnubisDB - Subdomain enumeration and information gathering tool
- HypeStat - Free statistics and analytics service, where you can find information about every website
- Private Key Project - Information security tools from Private Key Project
- SiteDossier - Profiles for millions of sites on the web
- SpyOnWeb - Quick and convenient search for the websites that probably belong to the same owner
- HaveIBeenSquatted - Check if a domain has been typosquatted
- expireddomains.net - ExpiredDomains.net gathers all the information you need to find good Expired Domains that are Pending Delete and you can Backorder
- SubDomainRadar.io - Discover hidden subdomains with unparalleled accuracy and speed
- Google Safe Browsing - Google's Safe Browsing technology examines billions of URLs per day looking for unsafe websites
- WHOISFreaks.com - Unleash the Power of Data with Our Domain and IP Intelligence
- ip.THC.org - Reverse DNS, Subdomains and CNAMEs Lookup
- Tenant Domain Finder - Find All Domains in a Microsoft 365 Tenant
- NetCraft SearchDNS - Search Web by Domain
- SpoofChecker - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams
- Cerast Intelligence - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning
- DomScan - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting
- CC.LA - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR)
- ctr.name - Give it an apex domain and you get every subdomain on file
URLs
- PhoneBook - Lists all domains, email addresses, or URLs for the given input domain
- IntelligenceX - Search engine and data archive
- URLScan - A sandbox for the web
- HackerTarget - Collect information about IP Addresses, Networks, Web Pages and DNS records
- MOZ Link Explorer - The world's best backlink checker with over 40 trillion links
- shorteners.grayhatwarfare.com - Search URLs exposed by Shortener services
- CommonCrawl Index - Open repository of web crawl data
- URLVoid - Check the online reputation/safety of a website
- Norton SafeWeb - Look up a site, Get our rating
- CheckPhish - Real-time URL and website scanner
- web-check.xyz - All-in-one OSINT tool, for quickly checking a websites data
- TinyScan - Effortlessly Dive into URL Details
- urldna.io - Unleash website insights! urldna.io analyzes data, monitors brands and exposes security risks
DNS
- DNSDumpster - DNS recon & research, find & lookup dns records
- Chaos - Enhance research and analyse changes around DNS for better insights
- RapidDNS - DNS query tool which make querying subdomains or sites of a same ip easy
- DNSdb - Passive DNS historical database
- Omnisint - Reverse DNS lookup
- HackerTarget - Collect information about IP Addresses, Networks, Web Pages and DNS records
- passivedns.mnemonic.no - Web interface for querying passive DNS data collected in our malware lab
- ptrarchive.com - Over 230 billion reverse DNS entries from 2008 to the present
- dnshistory.org - Domain Name System Historical Record Archive
- DNSTwister - The anti-phishing domain name search engine and DNS monitoring service
- DNSviz - Tool for visualizing the status of a DNS zone
- C99.nl - Over 57 quality API's and growing
- wannabe1337.xyz - Online Tools
- DNSlytics - Find out everything about a domain name, IP address or provider
- dnsrepo.noc.org - DNS Database Repository Search
- DNSSpy - Monitor, validate and verify your DNS configurations
- ZETAlytics - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts
- AskDNS - Lookup Connected Domain Names and IP Addresses
- 360 PassiveDNS.CN - Biggest public available db in China designed for security and research purpose
- MXtoolbox - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool
- NSLookup.io - Find all DNS records for a domain name using this online tool
- Robtex DNS Lookup - Get detailed information on the nameservers associated with a domain name
- DNSMap - Worldwide DNS Propagation Checker
- Validin - Massive collection of DNS records with free DNS history search
- dnslookup.pro - Advanced DNS Record Analysis & Troubleshooting
- ViewDNS.info - A web-based toolkit offering over 25 DNS and network intelligence tools for reconnaissance, diagnostics, and research
- dnsaudit.io - Find DNS misconfigurations, risks and security gaps
Certificates
- Crt.sh - Certificate Search
- CTSearch - Certificate Transparency Search Tool
- tls.bufferover.run - Quickly find certificates in IPv4 space
- CertSpotter - Monitors your domains for expiring, unauthorized, and invalid SSL certificates
- SynapsInt - The unified OSINT research tool
- Censys Search - Certificates - Certificates Search
- ciphersuite.info - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format
- certificatedetails - Online certificate viewer. Inspect and download certificates from your browser
- FacebookCT - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates
- certs.io - Search TLS certificates across the internet.
- ODIN Certificates Search - ODIN Certificates Search
WiFi Networks
- Wigle.net - Maps and database of 802.11 wireless networks with statistics
- wifimap.io - Connect to all Free WiFi Hotspots using WiFi Map App all over the World!
- wificafespots.com - Free WiFi Cafe Spots
- wifispc.com - Free map of Wi-Fi passwords anywhere you go!
- openwifimap.net - HTML5 map with OpenWiFiMap data
- mylnikov.org - Public API implementation of Wi-Fi Geo-Location database
- wifidb.net - Project to collect wireless access points gathered by Vistumbler or other wireless network scanners
- freifunk-karte.de - Online map of free, publicly accessible, non-commercial, and uncensored Wi-Fi access points in Germany
Credentials
- Have I Been Pwned - Check if your email or phone is in a data breach
- Dehashed - Free deep-web scans and protection against credential leaks
- LeakCheck.io - Make sure your credentials haven't been compromised
- crackstation.net -Massive pre-computed lookup tables to crack password hashes
- HashKiller - Pre-cracked Hashes, easily searchable
- LeakedPassword - Search across multiple data breaches to see if your pass has been compromised
- BugMeNot - Find and share logins
- Hashes.com - Decrypt and crack your MD5, SHA1, SHA256, MySQL, MD5 Email, SHA256 Email, and NTLM hashes for free online
- Hashmob - The Largest Password Recovery Community
- WhiteIntel - Check if a company or its customers was victim of an information stealer malware
- ntlm.pw - Instantly look up NTLM hashes and resolve them to plaintext passwords using our database with 8B+ entries
- Hudson Rock - Use Hudson Rock’s free cybercrime intelligence tools to learn how compromised credentials are impacting your business
- hackedlist.io - Enter your domain to find credentials compromised by info-stealer malware
- HaveIBeenSold - Lets you find out whether or not your email has been sold to third parties
- Leak.sx - The best leaked accounts website you always wanted
- ScatteredSecrets - Search data breaches to see if your password has been compromised
- InfoStealers.info - OSINT made simple. Instant insights from Infostealer data
- NiamonX PwnedLookup - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations
- Lunar Cyber - Free, enterprise-grade, compromised-credentials monitoring platform, available to every company
Leaks
- WikiLeaks - News leaks and classified media provided by anonymous sources
- Leak-Lookup - Search across thousands of data breaches
- Snusbase - Stay on top of the latest database breaches
- Weleakinfo - View dehashed breached databases
- breachdirectory.org - Check if your information was exposed in a data breach
- BreachForums - Breaches, Data leaks, databases and more
- Siph0n Breach DB (onionsite) - Breaches, Data leaks, Exploits
- Exposed Forum - The premier Databreach discussion & leaks forum
- Distributed Denial of Secrets - Journalist 501(c)(3) non-profit devoted to publishing and archiving leaks
- Have I Been Zuckered - Facebook Data Breach Checker
- Cryptome - Documents for publication that are prohibited by governments worldwide
- LeakPeek - Search for your publicly leaked passwords using an email or username, secure your personal data
- BreachCheck.io - Free service for consumers that allows you to check and download a list of your personal data exposed in various databreaches
- OCCRP Aleph - The global archive of research material for investigative reporting
- LeakRadar - We collect publicly published infostealer logs so you can quickly check if your email credentials have been compromised
- Offshore Leaks - Find out who's behind more than 800000 offshore companies, foundations and trusts from ICIJ's investigations
- Venacus - Search across 70+ TB of data breaches and leaked documents
- Leaksyr - Enterprise-grade threat intelligence to identify compromised credentials and secure your digital assets against data breaches
Hidden Services
Social Networks
These can be useful for osint and social engineering.
Phone Numbers
- NumLookup - Free reverse phone lookup
- SpyDialer - Free Reverse Lookup Search
- WhitePages - Find people, contact info & background checks
- National Cellular Directory - Begin your comprehensive people search now
- Phone Validator - Is it a cell phone or is it a landline or is it a fake?
- Free Carrier Lookup - Enter a phone number and we'll return the carrier name
- RocketReach - Your first-degree connection to any professional
- sync.me - Find out who called
- EmobileTracker - Track Mobile Owner Name, Location and Mobile Service Provider
- Reverse Phone Lookup - Find Out The Owner Of A Phone Number
- ThatsThem - Reverse phone lookup
- thisnumber.com - International Phone Directories
- usphonebook.com - Free Reverse Phone Number Lookup
- truepeoplesearch.com - Get current address, cell phone number, email address, relatives, friends and a lot more
- Tellows - Who is calling? The phone number reverse search
- SynapsInt - The unified OSINT research tool
- C99.nl - Over 57 quality API's and growing
- ValidNumber.com - Free reverse phone lookup service to let you identify a caller associated with any 10-digit phone number from the US and Canada
- CellIdFinder - Nonprofit project which helps you to find GSM BTS by MCC, MNC, LAC and CellID
- OldPhoneBook - Instantly search a large selection from the past 20 years of USA phone listings
- Spokeo - Search by name, phone, address, or email to confidentially lookup information about people you know
- Intelius Phone Lookup - Look up a phone number to find owner information, carrier details, and more
- ZabaSearch Phone Lookup - Reverse Phone Lookup Tool Can Uncover Personal Information, Social Media Data, Online Activity, Photos, and More
- AnyWho Phone Lookup - Find out information associated with a phone number
- Radaris Phone Lookup - Look up any phone number to see its owner and identify who's calling or texting you
- Reverse Phone Lookup - Reverse phone number lookup with millions of listings including name or address
Images
- Google Image Search - The most comprehensive image search on the web
- Baidu Image - Baidu Image Search
- Yahoo Image - Yahoo Image Search
- Yandex Image - Yandex Image Search
- Facecheck.id - Search for people by photo and verify you are talking to the person they claim to be
- Bing Visual Search - See it, search it
- Reverse Image Search - Super-fast image finder that helps you find similar images online
- Reverse Image - Find Where Images Appear Online
- Pixsy - Find and fight image theft
- Pimeyes - Face Search Engine, Reverse Image Search
- Pictriev - Find look-alike celebrities on the web using the face recognition
- Karmadecay - Reverse image search of Reddit.com
- Infringement Report - The web's best image copyright infringement search tool
- Tineye - Image search and recognition company
- Flickr - Home to tens of billions of photos and 2 million groups
- Sogou - Chinese technology company that offers a search engine
- Jimpl - Online photo metadata and EXIF data viewer
- Same Energy - Find beautiful images
- Pixabay - Stunning royalty-free images & royalty-free stock
- FotoForensics - Tools and training for digital picture analysis, including error level analysis, metadata, and tutorials
- Exif data - Online application that lets you take a deeper look at your favorite images
- Image Identify - Image recognition site, just drag your image & identify
- ScamDigger - You will see if that picture belongs to somebody else, was used by somebody else, already scamlisted, etc
- metadataremover.ai - Remove supported EXIF, GPS, XMP, IPTC and AI metadata from JPG, PNG and WebP images directly in your browser
Threat Intelligence
- MITRE ATT&CK - Globally-accessible knowledge base of adversary tactics and techniques
- PulseDive - Threat intelligence made easy
- ThreatCrowd - A Search Engine for Threats
- ThreatMiner - Data Mining for Threat Intelligence
- VirusTotal - Analyze suspicious files, domains, IPs and URLs to detect malware and other breaches
- vx-underground.org - The largest collection of malware source code, samples, and papers on the internet
- bazaar.abuse.ch - Malware sample database
- feodotracker.abuse.ch - List of botnet Command&Control servers
- Joe Sandbox - Threat hunting & search engine
- sslbl.abuse.ch - All malicious SSL certificates
- urlhaus.abuse.ch - Propose new malware urls
- threatfox.abuse.ch - Indicator Of Compromise (IOC) database
- yaraify.abuse.ch - Scan suspicious files such as malware samples or process dumps against a large repository of YARA rules
- Rescure - Curated cyber threat intelligence for everyone
- otx.alienvault - The World's First Truly Open Threat Intelligence Community
- urlquery.net - Service for detecting and analyzing web-based malware
- socradar.io - Extension to your SOC team
- VirusShare - System currently contains 48 million malware samples
- PassiveTotal - Security intelligence that scales security operations and response
- malapi.io - Windows APIs used for malicious purposes
- filesec.io - Latest file extensions being used by attackers
- leakix.net - Search engine indexing public information and an open reporting platform linked to the results
- tria.ge - Fully automated solution for high-volume malware analysis using advanced sandboxing technology
- Polyswarm - Launchpad for new technologies and innovative threat detection methods
- Cisco Talos - The threat intelligence organization at the center of the Cisco Security portfolio
- scamsearch.io - Find your scammer online & report them
- CyberCampaigns - Threat Actor information and Write-Ups
- ORKL - The Community Driven Cyber Threat Intelligence Library
- Maltiverse - Data from more than 100 different Threat Intelligence sources
- Inquest Labs - Threat intelligence from hundreds of public, private, and internal sources to develop new FDR signatures and rules
- PhishTank - Collaborative clearing house for data and information about phishing on the Internet
- IntelOwl - Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file, an IP or a domain from a single API at scale
- Lupovis - Analyze and collect data on Internet-wide scans and attacks in real-time. We use this data to identify and classify malicious actors
- AbuseIPDB - Check the report history of any IP address to see if anyone else has reported malicious activities
- Sucuri SiteCheck - Check websites for known malware, viruses, blacklisting status, website errors, out-of-date software, and malicious code
- Spamhaus - Protect and investigate using IP and domain reputation data
- ThreatBook - One step ahead of your adversary with high-fidelity, efficient and actionable cyber threat intelligence
- ShadowServer - Nonprofit security organization working altruistically behind the scenes to make the Internet more secure for everyone
- Team Cymru - Global leader in cyber threat intelligence and attack surface management
- BeVigil - Search engine for mobile application security testing
- CIRCL - The Computer Incident Response Center Luxembourg is a government-driven initiative designed to gather, review, report and respond to computer security threats and incidents
- MetaDefender Cloud - Advanced threat detection and prevention platform
- Cybersixgill - Threat intelligence platform that provides access to a wide range of cybersecurity information, including dark web monitoring and threat actor analysis
- Hybrid Analysis - Free malware analysis service for the community that detects and analyzes unknown threats using a unique Hybrid Analysis technology
- IBM X-Force Exchange - Threat intelligence sharing platform enabling research on security threats, aggregation of intelligence, and collaboration with peers
- The DFIR Report - Real Intrusions by Real Attackers, The Truth Behind the Intrusion
- Detection.FYI - Search Sigma rules
- WhoisXMLAPI - Domain & IP Data Intelligence for Greater Enterprise Security
- APIVoid - Threat analysis centered on IP and Domain reputation, along with additional services
- AnyRun - Browse thousands of malware samples in our database
- Filescan.io - Search reports for file name, URL, IP, Domain or Hash
- MalShare - Community driven public malware repository that works to provide free access to malware samples
- Kaspersky TIP - Scan files, domains, IP addresses, and URLs for threats, malware, viruses
- Malwares.com - Search malwares online
- ApkLab - Mobile threat intelligence platform designed to provide the most relevant information for Android security researchers
- Scumware - Find latest reports about malware and other threats
- Living off the False Positive - Autogenerated collection of false positives sourced from some of the most popular rule sets
- HijackLibs - Project for tracking publicly disclosed DLL Hijacking opportunities
- bootloaders.io - Curated list of known malicious bootloaders for various operating systems
- WTFBins - Catalogue benign applications that exhibit suspicious behavior. These binaries can emit noise and false positives in threat hunting and automated detections
- LOFLCAB - Document every cmdlet, binary, script, and WMI class that can be used for Living Off the Foreign Land techniques
- OpSecFailure - Site that lists how individuals messed up their opsec, no personal info is shared on this site
- TrailDiscover - An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications
- scamdb.net - Report and Search Online Scams
- OpenPhish - Actionable intelligence data on active phishing threats
- ThreatIntelligencePlatform.com - Data, tool, and API provider that specializes in automated threat detection, security analysis and threat intelligence solutions
- Hunt.io - Service that provides threat intelligence data about observed network scanning and cyberattacks
- LOLC2 - Collection of C2 frameworks that leverage legitimate services to evade detection
- seized.fyi - List of seized websites
- InfoTrail - Advanced OSINT search engine helping security professionals and researchers uncover critical intelligence
- RuleHound - An index of publicly available and open-source threat detection rulesets
- ClickFix Wiki - ClickFix lures can lead to malware and computer viruses. If you see text like this online, it's likely a scam
- PromptIntel - A collaborative threat intel platform to identify patterns and artifacts indicating potential exploitation or misuse of Large Language Models
- Zone-H Archive - Online archive dedicated to collecting and publishing records of defaced websites
- ransomlook.io - Open-source project providing real-time ransomware intelligence
- opensourcemalware.com - A community database, API and collaboration platform to help identify and protect against open-source malware
- IPGeolocation.io - Accurate IP Geolocation API and Databases with Threat Intelligence
- Living Off Trusted Sites (LOTS) Project - Cataloging how cyber attackers abuse legitimate platforms like GitHub or Google Docs to host malware, C2, or exfiltrate data
- lolrmm.io - Curated list of Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors
- Living Off The WebHooks - Community-driven project documenting webhooks that may be exploited for data exfiltration and C2 communications
- LOLEXFIL - Reference for data exfiltration methods using trusted tools
- KleenScan - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status
- ClawSearch - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check
- detection.wiki - Detection Rule and Telemetry Catalog
Web History
- Web Archive - Explore more than 702 billion web pages saved over time
- Archive.ph - Create a copy of a webpage that will always be up even if the original link is down
- CachedPages - Get the cached page of any URL
- stored.website - View cached web pages/website
- CommonCrawl - Open repository of web crawl data
- UK Web Archive - Collects millions of websites each year, preserving them for future generations
- Arquivo - Non-profit service that maintains information published on the web of interest to the Portuguese community
- Archive-It - An archive of digital government and non-government organization (NGO) documents and reports
- HAW - Croatian Web Archive
Files
- Pastebin - Website where you can store text online for a set period of time
- Mega - Secure and private cloud storage for everyone. Store and share files, chat, meet, back up, sync, and more
- 4Shared - Search, Store and Share easily. Upload, discover and share files without a hitch
- files.fm - Explore content shared by community
- edisk.cz - Online storage for backing up, sharing and searching for photos, videos, music and other files
- doodstream - DoodStream Search Engine
- UVRX Search - Most comprehensive online file storage search engine
- filesearch.link - You can search archives, programs, videos, music, books and more
- RapidGators Search - Search for files stored on the rapidgator cloud
Surveillance cameras
Crypto
- ChainAbuse - Report malicious crypto activity
- BlockChair - Blockchain explorer, analytics and web services
- BlockCypher - Search the block chain
- AI DECISIONS Wallet Checker - Free wallet check across Ethereum, Bitcoin, Tron, Base, Arbitrum and Gnosis: sanctions, mixer exposure and risk tier, no account required
People
- TruePeopleSearch - Free people search tool. Search billions of public records
- TruthFinder - A people search is a quick and simple way to find information on someone by name
- BeenVerified - BeenVerified's mission is to give people easy and affordable access to public record information
- ZabaSearch - Free* People Search and Public Information Search Engine
- PeekYou - Fast People Search Made Easy
- PeopleFinders - People Search
- Pipl - The #1 source for identity & trust
- That's Them - Find Someone's Contact Details By Name
- snitch.name - Social White Pages application with helps you Search for People's Profiles on Social Sites
- Webmii - People search engine
- FastPeopleSearch - Find a person by name, phone number, or street address
- Sorted By Name - A curated collection of links to genealogy details mentioned on other websites, or acquired by the webmaster
- Radaris - Find People Fast and Free
- Addresses.com - Free People Search and Public Information Search Engine
- Advanced Background Checks - Free People Search
- Yasni - Search phone, email, address for any name. News, pictures & links for any person. Find anyone on the internet with the world's largest free people search
- USA Data Search - The USA official website provides access to public data that can be searched and viewed by anyone
- AnyWho - Finding People, Places, and Businesses
- Lullar - Profile Search by Email, First Last Name or Username
- Ancestry - The largest for-profit genealogy company in the world, it operates a network of genealogical, historical records, and related genetic genealogy websites
- genealogy.com - Source for family history buffs to find genealogical research originally posted in GenForum and our most popular genealogy articles
- US Search - Access to details about the people in your life. Access public records, contact information, background checks & more
- Find My Past - Discover your global ancestors by searching millions of records across the world
- FamilySearch - Search for your ancestors in birth certificates, marriage registrations, census records, and other documents
- iTools - Wink People Search - Free people search. Find people on social networks and across the Web
- Intelius - Leading provider of public data about people and their connections to others
- Whatsmyname - OSINT tool designed for enumerating usernames across a wide array of websites
- Namecheckr - Social and Domain Name Availability Search For Brand Professionals
- Username Search - Free online tool to conduct reverse username search across various social media platforms, online dating sites, forums, and communities simply by providing a username
- TheOrg - World's biggest network of public org charts
- Xquik - Search public X posts, inspect public profiles, monitor keywords and use REST or MCP workflows for X data
- Sherlock Search - Upload one photo and Sherlock finds where that face appears across 9+ social platforms and public records
- Offendersearch - Search 58 US sex offender registries, covering the 50 states, DC and the US territories, in one query
Vehicle
- License Plate Owner API - DPPA-compliant vehicle lookup API for license plate investigations
- FaxVin - Up-to-date records for a used vehicle: odometer readings, title brands and lien status, accident and damage history, recalls
- EpicVin - VIN check about the vehicle's history, price, damages, title records, recalls
- AutoCheck Vehicle History - Search for vehicle history records with a valid US license plate number
- GOV.UK Vehicle Information - Check online to find out what information the Driver and Vehicle Licensing Agency (DVLA) holds about a vehicle
- PlatesMania - Largest Internet project dedicated to vehicle registration plates, platespotting and everything pertaining to them
- auto-info.gratis - After providing your vehicle's license plate number, you'll receive:
make, model, year of manufacture, engine size and all available information
Unclassified
- DorkSearch - Speed up your Dorking
- usersearch.org - Find someone by username or email on Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs
- Wappalyzer - Instant access to website technology stacks, company and contact details, social media profiles, email verification and more
- Awakari - Real-Time Search from unlimited sources like RSS, Fediverse, Telegram, etc. Filter events by keywords, numeric conditions, condition groups
- CanIUse.com - Browser support tables for modern web technologies
- Known Agents - Track and Control Artificial Agents Crawling Your Website
- Not Human Search - Search engine for AI agent tools and infrastructure. Indexes 1,750+ sites ranked by agentic readiness score with REST API and MCP server
Not working / Paused
- DNS.BufferOver.run
- NetoGraph - Captures and indexes detailed, low-level snapshots of website behaviour
- Hashdd - Known Good Cryptographic Hashes
- CVE Trends - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub
If you want to propose changes, just open an issue or a pull request.
edoardottt.com to contact me.
Подобранный список поисковых систем, полезных для тестирования на проникновение, оценки уязвимостей, операций красной и синей команд, поиска багов за вознаграждение и общей работы с OSINT.