The search engine for anything

[Costas]

Is the world's first search engine for Internet-connected devices.

https://www.shodan.io/


https://www.youtube.com/watch?v=Pyi1mwowPUo

 

[Costas]

Shodan 2000​

https://2000.shodan.io/

Shodan InternetDB - Fast IP Lookups for Open Ports and Vulnerabilities (2022)​

https://internetdb.shodan.io/

 

[Costas]

Search Engines For Pentesters

https://wigle.net
https://grep.app
https://app.binaryedge.io
https://onyphe.io
https://viz.greynoise.io
https://censys.io
https://hunter.io
https://fofa.info
https://zoomeye.org
https://leakix.net
https://intelx.io
https://app.netlas.io
https://searchcode.com
https://urlscan.io
https://publicwww.com
https://fullhunt.io
https://socradar.io
https://binaryedge.io
https://ivre.rocks
https://crt.sh
https://vulners.com
https://pulsedive.com
https://securityheaders.com/

 

[Costas]

subdomains listers
https://www.nmmapper.com/sys/tools/subdomainfinder/
https://subdomains.whoisxmlapi.com/

also
site:yahoo.com

 

[Costas]

http://urlscan.io/ - analyze and scan in various ways, mainly to detect malicious websites such as phishing sites ref
https://networkscan.monster/ - IP Lookups for Open Ports
Breach Forum

 

[Costas]

How to Bypass Cloudflare in 2022

The target website is using SSL certificates, those SSL certificates are registered in the Censys database. Although websites have deployed their website onto the Cloudflare CDN, sometimes their current or old SSL certificates are registered to the original server.

https://scrapeops.io/web-scraping-playbook/how-to-bypass-cloudflare/

(mirror)

---

CertDB - database of the internet's SSL/TLS certificate names