fofa

There are 3 repositories under fofa topic.

• DropsDevopsOrg / ECommerceCrawlers

  实战🐍多种网站、电商数据爬虫🕷。包含🕸：淘宝商品、微信公众号、大众点评、企查查、招聘网站、闲鱼、阿里任务、博客园、微博、百度贴吧、豆瓣电影、包图网、全景网、豆瓣音乐、某省药监局、搜狐新闻、机器学习文本采集、fofa资产采集、汽车之家、国家统计局、百度关键词收录数、蜘蛛泛目录、今日头条、豆瓣影评、携程、小米应用商店、安居客、途家民宿❤️❤️❤️。微信爬虫展示项目:

  python3crawlerbaidu-tiebataobao-spiderdazhong-spiderdouban-moviedouban-musicalitaskbaotuquanjingxianyusohufofawechatbaiduzhilianzhaopinlagoubossscrapyctrip
  Language:Python 5237

• wgpsec / fofa_viewer

  A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

  cybersecurityfofafofa-apifofa-searchredteamsecurity-tools
  Language:Java 1671

• xiecat / fofax

  FOFAX是一个基于fofa.info的API命令行查询工具

  fofafofa-clirulesurvey
  Language:Go 792

• G3et / Search_Viewer

  集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的空间测绘gui图形界面化工具，支持一键采集爬取和导出fofa、shodan等数据，方便快捷查看

  fofaguiquakeshodancensyszoomeye
  Language:Python 774

• adysec / ARL

  ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

  scansecuritytoolsarlcyber-securityflaskfofapythonsecurity-toolsshodan
  Language:Python 735

• u21h2 / nacs

  事件驱动的渗透测试扫描器 Event-driven pentest scanner

  log4jfscanxraycvenucleifofapentestredteamsecurityshiroexploitgolangscanner
  Language:Go 690

• xzajyjs / ThunderSearch

  macOS上的小而美【Fofa、Shodan、Hunter、Zoomeye、Quake网络空间搜索引擎】闪电搜索器；GUI图形化(Mac/Windows)渗透测试信息搜集工具；资产搜集引擎；hw红队工具hvv

  fofahunterinformation-gatheringpenetration-testingquakeshodanzoomeyecyberspace-search-engineshodan-apishodan-search
  Language:Python 663

• fofapro / fofa_view

  FOFA Pro view 是一款FOFA Pro 资产展示浏览器插件，目前兼容 Chrome、Firefox、Opera。

  chromefirefoxfofaopera
  Language:JavaScript 610

• Kento-Sec / AsamF

  AsamF是集成Fofa、Quake、Hunter、Shodan、Zoomeye、Chinaz、0.zone及爱企查的一站式企业信息资产收集、网络资产测绘工具。

  fofazoomeyehunterquakeshodan0zone
  564

• asaotomo / FofaMap

  FofaMap是一款基于Python3开发的跨平台FOFA API数据采集器，支持普通查询、网站存活检测、统计聚合查询、Host聚合查询、网站图标查询、批量查询等查询功能。同时FofaMap还能够自定义查询FOFA数据，并根据查询结果自动去重和筛选关键字，生成对应的Excel表格。另外春节特别版还可以调用Nuclei对FofaMap查询出来的目标进行漏洞扫描，让你在挖洞路上快人一步。

  apibatexcelfofanucleipython3scanspider
  Language:Python 522

• burpheart / koko-moni

  一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗

  blueteamfofahunterinfosecpentest-toolquakeredteamsecuritysecurity-toolsthreatbookweb-securityzoomeyeeasm
  443

• orleven / Tentacle

  Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

  tentaclepoc-scriptpoc-vulnerability-verificationfofaexploit-frameworkshodanpoc
  Language:Python 374

• carr0t2 / nps-auth-bypass

  nps认证绕过利用工具，CVE-2022-40494，使用此工具可在浏览器访问web控制端后台页面，或者批量获取socks5和http代理

  bypasscveexpfofanpspocproxy
  Language:Python 306

• cipher387 / awesome-ip-search-engines

  This repository contains tutorials and tools for working with IP search engines. Search engines that search all devices connected to the Internet and collect a lot of different information about them (open ports, protocols used for data transfer, Whois information etc)).

  360quakecriminalipfofagreynoisehunternetlas-ioonypheshodanzoomeyeawesome-list
  298

• langsasec / info-gathering

  资产测绘，威胁情报中心，谷歌语法，外网，社工库，暗网，最新安全资讯

  fofasgkanwanginformation-gathering
  274

• FofaInfo / Awesome-FOFA

  The FOFA Library collects usage tips, common scenarios, F&Q, and more for FOFA.

  cybersecurityfofaosintsearch-enginethreat-intelligence
  267

• 10cks / fofaEX

  FOFA EX 是一款基于fofa api（也可导入鹰图、夸克文件）实现的红队综合利用工具，可基于模板把工具作为插件进行集成，自动化进行资产探测，目前提供的插件功能如下：探活、 nuclei 模板扫描、IP反查域名、域名反查 ICP 备案、dismap 指纹扫描

  cybersecurityfofafofa-apiredteamfofa-client
  Language:Java 217

• eremit4 / favihunter

  Discover and monitor internet assets using favicon hashes across search engines.

  censyscriminalipfaviconfofa-searchosintosint-pythonpython3shodantheat-intelthreat-huntingthreat-intelligencezoomeyefofaodingetodinosint-toolfavicon-hashsilentpushvalidin
  Language:Python 211

• j3ers3 / Searpy

  🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找

  fofagooglepentestshodanzoomeye
  Language:Python 210

• ffffffff0x / ones

  可用于多个网络资产测绘引擎 API 的命令行查询工具

  ffffffff0xfofafofa-clihunterosintquakeshodanzoomeye
  Language:Go 180

• Becivells / iconhash

  fofa shodan favicon.ico hash icon ico 计算器

  fofahashicoiconiconhashmmh3shodan
  Language:Go 171

• xfiftyone / xTools

  xTools，一个辅助小工具

  fofafofa-searchhunternucleipentest-toolquake
  163

• selmux / Alhasawi-ICS-OT-Security-projetcs

  ICS security resources

  censyscybersecuritydorksfofaicsics-securityiiotosintotot-securityshodanwordlistszoomeye
  Language:Lua 112

• h4cnull / ratel

  ratel is a red team information gathering and scanning tool developed in Rust. It supports querying from the fofa and zoomeye APIs, actively scans ports, extracts HTTPS certificate domains, and allows for custom POCs (Proof of Concepts).​ ratel(獾) 是由rust开发的红队信息搜集，扫描工具，支持从fofa，zoomeye API查询，主动扫描端口，提取https证书域名，自定义poc。

  fofahackingpentestingredteamrustscannersecurityzoomeye
  Language:Rust 84

• The-Osint-Toolbox / Internet-OSINT

  Cast your OSINT net further a field and see what else you can discover on the Internet.

  censyscertificatescybersecuritydnsfofagreynoiseiotipnetlasosintshodanwebcamzoomeye
  84

• AbelChe / rabbithole

  🦀️ 一个完全使用Rust编写的代理池工具，从网络搜索socks5代理，检测可用性之后开启socks5代理服务。A proxy pool tool completely written in Rust, which searches for SOCKS5 proxies from the network, and after checking their availability, starts a SOCKS5 proxy service.

  rustsocks5fofafreeproxyquakezoomeye
  Language:Rust 80

• abuyv / exposor

  Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.

  asset-inventorycensyscontactless-reconcpecvefofapassive-reconreconnaissancesecuritysecurity-toolsshodanvulnerability-detectionzoomeye
  Language:Python 54

• Ggasdfg321 / FreeFRP

  通过fofa、hunter、shadon导出frp服务器地址，找出未设置密码的frp服务器（白嫖）

  fofafrp
  Language:Go 41

• asaotomo / FofaMap-Cloud

  FofaMap云查询版是基于C/S架构打造的Fofa数据采集器，仅需配置好一个服务端，即可实现多个客户端同时在线查询，其客户端支持FofaMap国庆版全部功能。

  fofamapfofapython3apicloud
  Language:Python 38
• pythia

  EfstratiosLontzetidis / pythia

  Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

  adversary-infrastructure-huntingbinaryedgecensyscticyber-threat-intelligencefofahuntermalware-infrastructure-huntingpythiaquery-languageshodanzoomeye
  Language:Python 32

• inspiringz / fofa

  一款 Go 语言编写的小巧、简洁、快速采集 fofa 数据导出到 Excel 表单的小工具。

  fofago-langxlsx
  Language:Go 31

• fofapro / fofa-java

  A Java version of the SDK, based on the FOFA Pro API, makes it easy for Java developers to quickly integrate FOFA Pro into their projects.

  fofajava
  Language:Java 29

• xiecat / sylas

  根据多个不同地区进行聚合查询以获取更多 fofa 数据

  fofa
  Language:Go 28
• transl8

  joshhighet / transl8

  a common schema for internet-connected service discovery 🔎 📚

  binaryedgecensysfofashodanzoomeyesyntax-transformationdsldsl-builder
  19

• WilliamL71Oi / FOFA_PRO_GUI

  用python做的十分好用且强大的FOFA的GUI版本，原创版本，点个star，谢谢支持

  fofa
  14

• langsasec / chafofa

  一款命令行fofa查询工具，可快速将查询结果导出到表格中

  fofafofa-api
  Language:Python 13