From c42195121615f2a30c2fa809c875a2c88f917f7c Mon Sep 17 00:00:00 2001 From: kriptoburak Date: Mon, 22 Jun 2026 07:58:05 +0300 Subject: [PATCH 01/26] Add Xquik to social network search engines --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8661ae2..10e76dd 100644 --- a/README.md +++ b/README.md @@ -422,6 +422,7 @@ These can be useful for osint and social engineering. - [Instagram](https://www.instagram.com/) - [YouTube](https://www.youtube.com/) - [Twitter/X](https://twitter.com/) +- [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords, and use REST or MCP workflows for X data. - [LinkedIn](https://www.linkedin.com/) - [Reddit](https://new.reddit.com/) - [Pinterest](https://www.pinterest.com/) From 3b69ceafb8dd443be1725af89505d0481c7a9a2e Mon Sep 17 00:00:00 2001 From: PatchRequest Date: Sun, 5 Jul 2026 16:53:33 +0200 Subject: [PATCH 02/26] Add Cerast Intelligence to Attack Surface --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8661ae2..cc48e38 100644 --- a/README.md +++ b/README.md @@ -154,6 +154,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln ### Attack Surface - [FullHunt.io](https://fullhunt.io/) - Attack surface database of the entire Internet +- [Cerast Intelligence](https://search.cerast-intelligence.com/) - Searchable archive of exposed panels and misconfigurations found across domains by continuous internet-wide scanning - [BinaryEdge](https://www.binaryedge.io/) - We scan the web and gather data for you - [Censys ASM](https://censys.io/) - Attack Surface Management Solutions - [RedHunt Labs](https://redhuntlabs.com/) - Discover your Attack Surface, Continuously From 69e0106827a082ba4db4b5bbc61033b5275e744c Mon Sep 17 00:00:00 2001 From: PatchRequest Date: Mon, 6 Jul 2026 09:11:14 +0200 Subject: [PATCH 03/26] Move Cerast Intelligence to Domains section (per review) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cc48e38..bafa4f2 100644 --- a/README.md +++ b/README.md @@ -154,7 +154,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln ### Attack Surface - [FullHunt.io](https://fullhunt.io/) - Attack surface database of the entire Internet -- [Cerast Intelligence](https://search.cerast-intelligence.com/) - Searchable archive of exposed panels and misconfigurations found across domains by continuous internet-wide scanning - [BinaryEdge](https://www.binaryedge.io/) - We scan the web and gather data for you - [Censys ASM](https://censys.io/) - Attack Surface Management Solutions - [RedHunt Labs](https://redhuntlabs.com/) - Discover your Attack Surface, Continuously @@ -283,6 +282,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [Tenant Domain Finder](https://domains.ourcloudnetwork.com/) - Find All Domains in a Microsoft 365 Tenant - [NetCraft SearchDNS](https://searchdns.netcraft.com/) - Search Web by Domain - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams +- [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning ### URLs From 78ea71df464508b2093dc8ff289b551cc3fabdf6 Mon Sep 17 00:00:00 2001 From: kriptoburak Date: Mon, 6 Jul 2026 10:16:38 +0300 Subject: [PATCH 04/26] Move Xquik to people section --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 10e76dd..503ea3d 100644 --- a/README.md +++ b/README.md @@ -422,7 +422,6 @@ These can be useful for osint and social engineering. - [Instagram](https://www.instagram.com/) - [YouTube](https://www.youtube.com/) - [Twitter/X](https://twitter.com/) -- [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords, and use REST or MCP workflows for X data. - [LinkedIn](https://www.linkedin.com/) - [Reddit](https://new.reddit.com/) - [Pinterest](https://www.pinterest.com/) @@ -660,6 +659,7 @@ These can be useful for osint and social engineering. - [Whatsmyname](https://whatsmyname.app/) - OSINT tool designed for enumerating usernames across a wide array of websites - [Namecheckr](https://www.namecheckr.com/) - Social and Domain Name Availability Search For Brand Professionals - [Username Search](https://www.user-searcher.com/) - Free online tool to conduct reverse username search across various social media platforms, online dating sites, forums, and communities simply by providing a username +- [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords, and use REST or MCP workflows for X data - [TheOrg](https://theorg.com/) - World's biggest network of public org charts ### Vehicle From 31a37f2afc5ecf4bd8597dad0dd755f5fdd7a702 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Mon, 6 Jul 2026 09:20:59 +0200 Subject: [PATCH 05/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 51652fc..e47abbf 100644 --- a/README.md +++ b/README.md @@ -660,8 +660,8 @@ These can be useful for osint and social engineering. - [Whatsmyname](https://whatsmyname.app/) - OSINT tool designed for enumerating usernames across a wide array of websites - [Namecheckr](https://www.namecheckr.com/) - Social and Domain Name Availability Search For Brand Professionals - [Username Search](https://www.user-searcher.com/) - Free online tool to conduct reverse username search across various social media platforms, online dating sites, forums, and communities simply by providing a username -- [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords, and use REST or MCP workflows for X data - [TheOrg](https://theorg.com/) - World's biggest network of public org charts +- [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords and use REST or MCP workflows for X data ### Vehicle From 5206e46ea701df6d25441b205c0ea35368e573ce Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Fri, 17 Jul 2026 08:24:44 +0200 Subject: [PATCH 06/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index e47abbf..310beb2 100644 --- a/README.md +++ b/README.md @@ -662,6 +662,7 @@ These can be useful for osint and social engineering. - [Username Search](https://www.user-searcher.com/) - Free online tool to conduct reverse username search across various social media platforms, online dating sites, forums, and communities simply by providing a username - [TheOrg](https://theorg.com/) - World's biggest network of public org charts - [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords and use REST or MCP workflows for X data +- [Sherlock Search](https://www.sherlocksearch.com/) - Upload one photo and Sherlock finds where that face appears across 9+ social platforms and public records ### Vehicle From f4df7730efd7e3dc3de8bf3f976a8d32fbd16d92 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Fri, 17 Jul 2026 08:26:46 +0200 Subject: [PATCH 07/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 310beb2..f87a654 100644 --- a/README.md +++ b/README.md @@ -178,6 +178,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [domaincodex.com](https://www.domaincodex.com/) - Research 500m+ root domain information and all associated data, including records, IP address, page metadata and much more - [APIfreaks.com](https://apifreaks.com/) - Unified API hub providing DNS, WHOIS, IP geolocation, screenshots and commodity data APIs for developers and security teams - [HackMyIP](https://hackmyip.com/) - Free privacy and security toolkit with 19+ tools including IP lookup, DNS lookup, DNS leaks test and many others +- [lookup.disclose.io](https://lookup.disclose.io/) - Find who owns any internet asset and the right security & disclosure contact ### Code From 83ea4d0feba56c4037c92a51336549ba780a36e7 Mon Sep 17 00:00:00 2001 From: edoardottt Date: Fri, 17 Jul 2026 15:17:33 +0200 Subject: [PATCH 08/26] check-dups.sh multi-word section #321 --- scripts/check-dups.sh | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/scripts/check-dups.sh b/scripts/check-dups.sh index 6e50ca8..6a794f9 100755 --- a/scripts/check-dups.sh +++ b/scripts/check-dups.sh @@ -29,8 +29,11 @@ check_section() { # Get all unique section headings from the README file and handle spaces and slashes sections=$(grep '^### ' "$readme" | sed 's/^### //' | sed 's/[\/&]/\\&/g') -# Call the function for each section -for section in $sections; do - check_section "$section" -done +# Call the function for each section, reading line by line to preserve spaces +while IFS= read -r section; do + if [[ -n "$section" ]]; then + check_section "$section" + fi +done <<< "$sections" + echo "[ OK! ] NO DUPLICATES FOUND." \ No newline at end of file From 24fc186cde13e1df5c370c3e335ff347244da2c4 Mon Sep 17 00:00:00 2001 From: Tajang <63721558+TajangSec@users.noreply.github.com> Date: Fri, 24 Jul 2026 10:09:29 +0800 Subject: [PATCH 09/26] Remove '0day.today' from resources list This domain name points to an online casino. --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index f87a654..65b5c44 100644 --- a/README.md +++ b/README.md @@ -117,7 +117,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [Rapid7 - DB](https://www.rapid7.com/db/) - Vulnerability & Exploit Database - [Vulmon](https://vulmon.com/) - Vulnerability and exploit search engine - [packetstormsecurity.com](https://packetstormsecurity.com/) - Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers -- [0day.today](https://0day.today/) - Ultimate database of exploits and vulnerabilities - [Living Off The Land Binaries, Scripts and Libraries](https://lolbas-project.github.io/) - Living Off The Land Binaries, Scripts and Libraries - [GTFOBins](https://gtfobins.github.io/) - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems - [Payloads All The Things](https://swisskyrepo.github.io/PayloadsAllTheThings/) - A list of useful payloads and bypasses for Web Application Security From 78506c642f5a69a1c40a9a428840c5ac1ba8b440 Mon Sep 17 00:00:00 2001 From: Esteve Castells Date: Tue, 28 Jul 2026 12:59:54 +0200 Subject: [PATCH 10/26] Add DomScan --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 65b5c44..272c0d5 100644 --- a/README.md +++ b/README.md @@ -283,6 +283,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [NetCraft SearchDNS](https://searchdns.netcraft.com/) - Search Web by Domain - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning +- [DomScan](https://domscan.net/tools/security) - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting ### URLs From 29122e26e9bea5cfc495e131f9a1d8e68b03fa13 Mon Sep 17 00:00:00 2001 From: tinyhill Date: Sat, 8 Aug 2026 02:09:43 +0800 Subject: [PATCH 11/26] =?UTF-8?q?Add=20CC.LA=20=E2=80=94=20free=20WHOIS/DN?= =?UTF-8?q?S/domain=20research=20toolkit?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 272c0d5..532c8a6 100644 --- a/README.md +++ b/README.md @@ -255,6 +255,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [grayhatwarfare.com - domains](https://shorteners.grayhatwarfare.com/domains) - How to search URLs exposed by Shortener services - [whoisology.com](https://whoisology.com/) - Deep Connections Between Domain Names & Their Owners - [who.is](https://who.is/) - WHOIS Search, Domain Name, Website, and IP Tools +- [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR). No sign-up required. - [pentest-tools.com](https://pentest-tools.com/information-gathering/find-subdomains-of-domain) - Discover subdomains and determine the attack surface of an organization - [BuiltWith](https://builtwith.com/) - Find out what websites are Built With - [MoonSearch](http://moonsearch.com/) - Backlinks checker & SEO Report From 0e80a9b00632101afed3642d1276702ffa1153c9 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Mon, 10 Aug 2026 10:44:41 +0200 Subject: [PATCH 12/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 532c8a6..07f52fb 100644 --- a/README.md +++ b/README.md @@ -255,7 +255,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [grayhatwarfare.com - domains](https://shorteners.grayhatwarfare.com/domains) - How to search URLs exposed by Shortener services - [whoisology.com](https://whoisology.com/) - Deep Connections Between Domain Names & Their Owners - [who.is](https://who.is/) - WHOIS Search, Domain Name, Website, and IP Tools -- [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR). No sign-up required. - [pentest-tools.com](https://pentest-tools.com/information-gathering/find-subdomains-of-domain) - Discover subdomains and determine the attack surface of an organization - [BuiltWith](https://builtwith.com/) - Find out what websites are Built With - [MoonSearch](http://moonsearch.com/) - Backlinks checker & SEO Report @@ -285,6 +284,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning - [DomScan](https://domscan.net/tools/security) - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting +- [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR). ### URLs From 1f1bd3830a3730e6b42fddd575fd216838f6539a Mon Sep 17 00:00:00 2001 From: stevenation1120 <190982962+stevenation1120@users.noreply.github.com> Date: Mon, 10 Aug 2026 15:11:53 -0400 Subject: [PATCH 13/26] Add SearchWebCode to Code section Co-Authored-By: Claude Fable 5 --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 07f52fb..e129a6b 100644 --- a/README.md +++ b/README.md @@ -188,6 +188,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [publicwww.com](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code - [SearchCode](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects - [NerdyData](https://www.nerdydata.com/) - Find companies based on their website's tech stack or code +- [SearchWebCode](https://www.searchwebcode.com/) - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages - [RepoSearch](http://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code - [SourceGraph](https://about.sourcegraph.com/) - Understand and search across your entire codebase - [HotExamples](https://hotexamples.com/) - Search code examples from over 1 million projects From da1574ecf2536e0033d8ae276ea0222c5f0bd3dd Mon Sep 17 00:00:00 2001 From: clavaa-owner <118783086+Clavaa@users.noreply.github.com> Date: Thu, 27 Aug 2026 09:23:08 -0400 Subject: [PATCH 14/26] Add Offendersearch to People --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 07f52fb..2c91bff 100644 --- a/README.md +++ b/README.md @@ -665,6 +665,7 @@ These can be useful for osint and social engineering. - [TheOrg](https://theorg.com/) - World's biggest network of public org charts - [Xquik](https://xquik.com/) - Search public X posts, inspect public profiles, monitor keywords and use REST or MCP workflows for X data - [Sherlock Search](https://www.sherlocksearch.com/) - Upload one photo and Sherlock finds where that face appears across 9+ social platforms and public records +- [Offendersearch](https://offendersearch.app/) - Search 58 US sex offender registries, covering the 50 states, DC and the US territories, in one query ### Vehicle From b24a10e95a9aa34ce8fb87f40d7030e9cf65f190 Mon Sep 17 00:00:00 2001 From: Boaz Sasson Date: Mon, 31 Aug 2026 15:29:29 +0700 Subject: [PATCH 15/26] Add LiveTrafficCam to Surveillance cameras --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 07f52fb..3e55ba9 100644 --- a/README.md +++ b/README.md @@ -617,6 +617,7 @@ These can be useful for osint and social engineering. - [WorldCam](https://worldcam.eu/) - Webcams from around the world - [Webcam Hopper](https://www.webcamhopper.com/) - Live Webcams from around the world - [Live Traffic](https://livetraffic.eu/) - Real-time monitoring of Europe’s live traffic cameras +- [LiveTrafficCam](https://livetrafficcam.com/) - Directory of US state DOT traffic cameras, each checked for a live image - [Geocam.ru](https://www.geocam.ru/en/) - Webcams of the world - [Moldova's borders webcams](https://www.border.gov.md/camere-web) - Official list of webcams at various border crossings around Moldova - [Earth Cam](https://www.earthcam.com/) - Leading network of live streaming webcams for tourism and entertainment From 94c73ba000720aa39af77b1d28daa9036b153097 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Tue, 1 Sep 2026 10:02:48 +0200 Subject: [PATCH 16/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3e55ba9..17aa05b 100644 --- a/README.md +++ b/README.md @@ -617,7 +617,6 @@ These can be useful for osint and social engineering. - [WorldCam](https://worldcam.eu/) - Webcams from around the world - [Webcam Hopper](https://www.webcamhopper.com/) - Live Webcams from around the world - [Live Traffic](https://livetraffic.eu/) - Real-time monitoring of Europe’s live traffic cameras -- [LiveTrafficCam](https://livetrafficcam.com/) - Directory of US state DOT traffic cameras, each checked for a live image - [Geocam.ru](https://www.geocam.ru/en/) - Webcams of the world - [Moldova's borders webcams](https://www.border.gov.md/camere-web) - Official list of webcams at various border crossings around Moldova - [Earth Cam](https://www.earthcam.com/) - Leading network of live streaming webcams for tourism and entertainment @@ -625,6 +624,7 @@ These can be useful for osint and social engineering. - [LiveWorldWebcams](https://liveworldwebcams.com/) - Live streaming webcams from around the world - [AlleCam](https://www.allecam.com/) - Webcam live from Europe and the whole world - [WXYZ Webcams](https://wxyzwebcams.com/) - Real-time webcams +- [LiveTrafficCam](https://livetrafficcam.com/) - Directory of US state DOT traffic cameras, each checked for a live image ### Crypto From 74a7d4664b2f0c7b6c40c9dbde67d9acbde42b1a Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Tue, 1 Sep 2026 10:10:13 +0200 Subject: [PATCH 17/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index be2c0ba..af2e883 100644 --- a/README.md +++ b/README.md @@ -188,7 +188,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [publicwww.com](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code - [SearchCode](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects - [NerdyData](https://www.nerdydata.com/) - Find companies based on their website's tech stack or code -- [SearchWebCode](https://www.searchwebcode.com/) - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages - [RepoSearch](http://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code - [SourceGraph](https://about.sourcegraph.com/) - Understand and search across your entire codebase - [HotExamples](https://hotexamples.com/) - Search code examples from over 1 million projects @@ -212,6 +211,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [SwaggerHub](https://app.swaggerhub.com/search) - Search public APIs and Domains in SwaggerHub - [RapidAPI Public Hub](https://rapidapi.com/hub) - Explore the world's largest API marketplace - [Repogrep](https://app.ami.dev/repogrep) - AI coding agent that can search across any public GitHub repository +- [SearchWebCode](https://www.searchwebcode.com/) - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages ### Email Addresses From 65d06585f87f08a6f713a7f1d03e1c8d57a0aaa4 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Tue, 1 Sep 2026 10:37:09 +0200 Subject: [PATCH 18/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index af2e883..1128fd4 100644 --- a/README.md +++ b/README.md @@ -149,6 +149,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [Living Off The Tunnels](https://lottunnels.github.io/#) - Community driven project to document digital tunnels that can be abused by threat actors as well by insiders for data exfiltrations, persistence, shell access etc - [LOLGlobs](https://0xv1n.github.io/LOLGlobs/) - A searchable catalog of glob-based command obfuscation techniques for Linux, macOS, Windows CMD, and PowerShell - [CVE PoC Search jamessawyer.co.uk](https://labs.jamessawyer.co.uk/cves/) - Search public GitHub repositories containing proof-of-concept exploit code, indexed by CVE identifier +- [1dayexploit.com](https://1dayexploit.com/) - We turn CVE claims into evidence and go past the single bug to the techniques behind it ### Attack Surface From 0ae777a2aa526cfc1be370a1fd9ad73873cd38a8 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Tue, 1 Sep 2026 10:38:22 +0200 Subject: [PATCH 19/26] Update README.md --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 1128fd4..070472e 100644 --- a/README.md +++ b/README.md @@ -286,7 +286,8 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning - [DomScan](https://domscan.net/tools/security) - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting -- [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR). +- [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR) +- [ctr.name](https://crt.name/) - Give it an apex domain and you get every subdomain on file ### URLs From efd42ad1a7d3ab7a7264c1c3d746214fffbacf49 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Tue, 1 Sep 2026 10:40:13 +0200 Subject: [PATCH 20/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 070472e..2e5239e 100644 --- a/README.md +++ b/README.md @@ -585,6 +585,7 @@ These can be useful for osint and social engineering. - [LOLEXFIL](https://lolexfil.github.io/) - Reference for data exfiltration methods using trusted tools - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check +- [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog ### Web History From 8471a86c16ae8307d44a4c0face770bfe360749a Mon Sep 17 00:00:00 2001 From: yakorolev Date: Wed, 2 Sep 2026 02:28:33 +0100 Subject: [PATCH 21/26] Add AI DECISIONS Wallet Checker to Crypto --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 2e5239e..9846ddf 100644 --- a/README.md +++ b/README.md @@ -635,6 +635,7 @@ These can be useful for osint and social engineering. - [ChainAbuse](https://www.chainabuse.com/) - Report malicious crypto activity - [BlockChair](https://blockchair.com/) - Blockchain explorer, analytics and web services - [BlockCypher](https://live.blockcypher.com/) - Search the block chain +- [AI DECISIONS Wallet Checker](https://aidecisions.ai/check) - Free wallet check across Ethereum, Bitcoin, Tron, Base, Arbitrum and Gnosis: sanctions, mixer exposure and risk tier, no account required ### People From 6f597efd3146eb0abbe9533d7d06a7fd292f50e7 Mon Sep 17 00:00:00 2001 From: Anton Date: Wed, 2 Sep 2026 23:27:50 +0200 Subject: [PATCH 22/26] Move 5 dead links to Not working / Paused, add ctlogs.dev MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Four hosts no longer resolve: CTSearch — ui.ctsearch.entrust.com — no A record certs.io — SERVFAIL AskDNS — askdns.com — NXDOMAIN Riddler — riddler.io — no A record FacebookCT returns a hard 404 — Meta retired the tool, the page is gone. All five moved to Not working / Paused, inside the link-check-disabled block, rather than deleted. Also added ctlogs.dev to Certificates. Disclosure — I built it, happy to split this into two PRs. --- README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 2e5239e..38f8de3 100644 --- a/README.md +++ b/README.md @@ -249,7 +249,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [Omnisint](https://omnisint.io/subdomain-enumeration) - Subdomain enumeration -- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [RobTex](https://www.robtex.com/) - Various kinds of research of IP numbers, Domain names, etc - [CentralOps - DomainDossier](https://centralops.net/co/DomainDossier.aspx) - Investigate domains and IP addresses - [DomainIQ](https://www.domainiq.com/) - Comprehensive Domain Intelligence @@ -324,7 +323,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [dnsrepo.noc.org](https://dnsrepo.noc.org/) - DNS Database Repository Search - [DNSSpy](https://dnsspy.io/) - Monitor, validate and verify your DNS configurations - [ZETAlytics](https://zetalytics.com/) - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts -- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - [360 PassiveDNS.CN](https://passivedns.cn/) - Biggest public available db in China designed for security and research purpose - [MXtoolbox](https://mxtoolbox.com/SuperTool.aspx) - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool - [NSLookup.io](https://www.nslookup.io/) - Find all DNS records for a domain name using this online tool @@ -338,16 +336,14 @@ A curated list of awesome search engines useful during Penetration testing, Vuln ### Certificates - [Crt.sh](https://crt.sh/) - Certificate Search -- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [tls.bufferover.run](https://tls.bufferover.run/) - Quickly find certificates in IPv4 space - [CertSpotter](https://sslmate.com/certspotter/) - Monitors your domains for expiring, unauthorized, and invalid SSL certificates - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [Censys Search - Certificates](https://search.censys.io/#) - Certificates Search - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser -- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search +- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API ### WiFi Networks @@ -701,6 +697,12 @@ make, model, year of manufacture, engine size and all available information - [NetoGraph](https://netograph.io/) - Captures and indexes detailed, low-level snapshots of website behaviour - [Hashdd](https://hashdd.com/) - Known Good Cryptographic Hashes - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub +- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool +- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates +- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset +- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses + From 9b7ec0252ee1003c86ef6371e80f3eb2dda1772f Mon Sep 17 00:00:00 2001 From: edoardottt Date: Thu, 3 Sep 2026 11:04:47 +0200 Subject: [PATCH 23/26] Add LunarCyber --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 2e5239e..a00d964 100644 --- a/README.md +++ b/README.md @@ -388,6 +388,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ScatteredSecrets](https://scatteredsecrets.com/) - Search data breaches to see if your password has been compromised - [InfoStealers.info](https://infostealers.info/) - OSINT made simple. Instant insights from Infostealer data - [NiamonX PwnedLookup](https://niamonx.io/) - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations +- [Lunar Cyber](https://lunarcyber.com/) - Free, enterprise-grade, compromised-credentials monitoring platform, available to every company ### Leaks From 53ecc83d23ea8349ff769925f5b3f6fec822b1cf Mon Sep 17 00:00:00 2001 From: edoardottt Date: Thu, 3 Sep 2026 11:06:55 +0200 Subject: [PATCH 24/26] Add Metadata Remover --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index a00d964..d1e234c 100644 --- a/README.md +++ b/README.md @@ -500,6 +500,7 @@ These can be useful for osint and social engineering. - [Exif data](http://exifdata.com/) - Online application that lets you take a deeper look at your favorite images - [Image Identify](https://www.imageidentify.com/) - Image recognition site, just drag your image & identify - [ScamDigger](https://www.scamdigger.com/picsearch.php) - You will see if that picture belongs to somebody else, was used by somebody else, already scamlisted, etc +- [metadataremover.ai](https://metadataremover.ai/) - Remove supported EXIF, GPS, XMP, IPTC and AI metadata from JPG, PNG and WebP images directly in your browser ### Threat Intelligence From 61a8342cf9f05702d5300529a52a4fdc6fd8c7f7 Mon Sep 17 00:00:00 2001 From: Anton Date: Thu, 3 Sep 2026 13:35:58 +0200 Subject: [PATCH 25/26] Fix review feedback --- README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 38f8de3..e198e48 100644 --- a/README.md +++ b/README.md @@ -343,7 +343,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search -- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API +- [ctlogs.dev](https://ctlogs.dev) - Find TLS/SSL certificates by domain, organization, serial, or fingerprint ### WiFi Networks @@ -699,11 +699,10 @@ make, model, year of manufacture, engine size and all available information - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub - [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [certs.io](https://certs.io/) - Search TLS certificates across the internet - [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - --- From 5efdd35da3d883f82da02a5f1f05328a50f806ac Mon Sep 17 00:00:00 2001 From: Tolga SEZER <19777824+projectboot@users.noreply.github.com> Date: Tue, 8 Sep 2026 21:01:57 +0300 Subject: [PATCH 26/26] Add Malwagon to Threat Intelligence --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..841d355 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [Malwagon](https://malwagon.com) - Search detonated malware samples by hash, IP, domain, URL, mutex, registry key or JA3/JA4 ### Web History