awesome-hacker-search-engines README

The project's README from github.com/edoardottt/awesome-hacker-search-engines. As one markdown file: README.md.

Awesome Hacker Search Engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS • Certificates • WiFi networks • Device Info • Credentials • Leaks • Hidden Services • Social Networks • Phone numbers • Images • Threat Intelligence • Web History • Files • Surveillance cameras • Crypto • People • Vehicle

General Search Engines

Servers

Vulnerabilities

Exploits

Attack Surface

Code

Email Addresses

Domains

URLs

DNS

Certificates

WiFi Networks

Device Information

Credentials

Leaks

Hidden Services

Social Networks

These can be useful for osint and social engineering.

Phone Numbers

Images

Threat Intelligence

Web History

Files

Surveillance cameras

Crypto

People

Vehicle

Unclassified

Not working / Paused


If you want to propose changes, just open an issue or a pull request.

edoardottt.com to contact me.

awesome-hacker-search-engines (edoardottt/awesome-hacker-search-engines)

vulnerability-scanner
Searching Database…

What is this?A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.
Is this a tool or just a list of links?It's a markdown-based awesome-list: just categorized links to external search engines, no software to run.
How is the list organized?Entries are grouped into categories like General, Servers, Vulnerabilities, Exploits, Attack Surface, Code, Email addresses, Domains, DNS, Certificates, WiFi networks, Credentials, and more, each with a short description of what the engine searches for.
Where should a beginner start?Start with the 'General Search Engines' section (Google, Shodan-style engines, DuckDuckGo, etc.) and move to specialized categories like Vulnerabilities or Exploits based on what you're hunting for.
Are entries vetted and kept current?The repo uses automated CI checks (duplicate detection and link checking) to keep entries valid, but most listed services are third-party and can change pricing or availability independently of this list.
Are the listed search engines free to use?Mixed: many like Shodan, Censys, and NIST NVD offer free tiers or public access, but several (e.g. FOFA, Quake, ZoomEye) are commercial platforms requiring paid plans for full features.
What kinds of targets can I search for?Servers, vulnerabilities (CVEs), exploits, attack surface data, source code, email addresses, domains, DNS records, certificates, WiFi networks, credentials, leaks, and more, each with a dedicated category of specialized search engines.
Is this list specific to one type of security work?No, it spans multiple disciplines: pentesting, bug bounty hunting, red/blue team ops, threat intelligence, and general OSINT reconnaissance.
Creator
edoardottt
Size
0.7 MB
Stars
11.3K
Updated
CommitOct 16
Age
4y
Commits · 90 Days