A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more
General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Mail addresses • Domains • URLs • DNS • Certificates • WiFi networks • Credentials • Social Networks • Phone numbers • Threat Intelligence • Web History
- Shodan - Search Engine for the Internet of Everything
- Censys
- Onyphe.io
- ZoomEye
- GreyNoise
- Natlas
- FOFA
- NIST NVD
- MITRE CVE
- osv.dev - Open Source Vulnerabilities
- Vulners.com
- Rapid7 - DB
- CVEDetails
- VulnIQ
- SynapsInt
- Hunter.io
- PhoneBook
- IntelligenceX
- Reacher.email
- RocketReach
- email-format.com
- EmailHippo
- ThatsThem - Reverse email lookup
- verify-email.org
- Melissa - Emailcheck
- VoilaNorbert
- SynapsInt
- skymem.info
- PhoneBook
- IntelligenceX
- Omnisint - Subdomain enumeration
- Riddler
- RobTex
- CentralOps - DomainDossier
- DomainIQ
- whois.domaintools.com
- whoisology.com
- who.is
- pentest-tools.com
- BuiltWith
- MoonSearch
- sitereport.netcraft.com
- SynapsInt
- statscrop.com
- securityheaders.com
- visualsitemapper.com
- similarweb.com
- buckets.grayhatwarfare.com - Public buckets
- DNSDumpster
- RapidDNS
- DNSdb
- Omnisint - Reverse DNS lookup
- HackerTarget
- passivedns.mnemonic.no
- ptrarchive.com
- dnshistory.org
- DNSTwister
- DNSviz
These can be useful for osint and social engineering.
- YouTube
- Tumblr
- Flickr
- SnapChat
- Quora
- TikTok
- Vimeo
- Medium
- VK
- Tinder
- RocketReach
- NumLookup
- WhitePages
- National Cellular Directory
- Phone Validator
- Free Carrier Lookup
- sync.me
- EmobileTracker
- SpyDialer
- Reverse Phone Lookup
- ThatsThem - Reverse phone lookup
- thisnumber.com
- usphonebook.com
- truecaller.com
- truepeoplesearch.com
- SynapsInt
If you want to propose changes, just open an issue.