From 364f029204021b49e16ffbd0c6555388547427e9 Mon Sep 17 00:00:00 2001 From: eduair94 <49965850+eduair94@users.noreply.github.com> Date: Sun, 5 Jul 2026 19:42:33 -0300 Subject: [PATCH 1/8] Add CheckLeaked to Credentials CheckLeaked (checkleaked.cc) is a data-breach search engine that checks whether an email, username or phone appears in leaks, showing the sources. Fits alongside Have I Been Pwned, Dehashed and LeakCheck.io. Co-Authored-By: Claude Opus 4.8 --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8661ae2..a555206 100644 --- a/README.md +++ b/README.md @@ -382,6 +382,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ScatteredSecrets](https://scatteredsecrets.com/) - Search data breaches to see if your password has been compromised - [InfoStealers.info](https://infostealers.info/) - OSINT made simple. Instant insights from Infostealer data - [NiamonX PwnedLookup](https://niamonx.io/) - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations +- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach, with sources; free searches, developer API and chat bots ### Leaks From a62726a9e35c0eab8c2935301c3019b2cf82527b Mon Sep 17 00:00:00 2001 From: KaseMaster Date: Wed, 15 Jul 2026 22:35:25 +0200 Subject: [PATCH 2/8] Add Argos OSINT to Domains section --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index e47abbf..56c650b 100644 --- a/README.md +++ b/README.md @@ -283,6 +283,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [NetCraft SearchDNS](https://searchdns.netcraft.com/) - Search Web by Domain - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning +- [Argos OSINT](https://argos-osint.com/dominio/) - Free unified domain intel dashboard combining WHOIS/RDAP, DoH DNS resolution and subdomain enumeration via crt.sh in a single client-side panel. Spanish-first. ### URLs From 6f597efd3146eb0abbe9533d7d06a7fd292f50e7 Mon Sep 17 00:00:00 2001 From: Anton Date: Wed, 2 Sep 2026 23:27:50 +0200 Subject: [PATCH 3/8] Move 5 dead links to Not working / Paused, add ctlogs.dev MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Four hosts no longer resolve: CTSearch — ui.ctsearch.entrust.com — no A record certs.io — SERVFAIL AskDNS — askdns.com — NXDOMAIN Riddler — riddler.io — no A record FacebookCT returns a hard 404 — Meta retired the tool, the page is gone. All five moved to Not working / Paused, inside the link-check-disabled block, rather than deleted. Also added ctlogs.dev to Certificates. Disclosure — I built it, happy to split this into two PRs. --- README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 2e5239e..38f8de3 100644 --- a/README.md +++ b/README.md @@ -249,7 +249,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [Omnisint](https://omnisint.io/subdomain-enumeration) - Subdomain enumeration -- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [RobTex](https://www.robtex.com/) - Various kinds of research of IP numbers, Domain names, etc - [CentralOps - DomainDossier](https://centralops.net/co/DomainDossier.aspx) - Investigate domains and IP addresses - [DomainIQ](https://www.domainiq.com/) - Comprehensive Domain Intelligence @@ -324,7 +323,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [dnsrepo.noc.org](https://dnsrepo.noc.org/) - DNS Database Repository Search - [DNSSpy](https://dnsspy.io/) - Monitor, validate and verify your DNS configurations - [ZETAlytics](https://zetalytics.com/) - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts -- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - [360 PassiveDNS.CN](https://passivedns.cn/) - Biggest public available db in China designed for security and research purpose - [MXtoolbox](https://mxtoolbox.com/SuperTool.aspx) - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool - [NSLookup.io](https://www.nslookup.io/) - Find all DNS records for a domain name using this online tool @@ -338,16 +336,14 @@ A curated list of awesome search engines useful during Penetration testing, Vuln ### Certificates - [Crt.sh](https://crt.sh/) - Certificate Search -- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [tls.bufferover.run](https://tls.bufferover.run/) - Quickly find certificates in IPv4 space - [CertSpotter](https://sslmate.com/certspotter/) - Monitors your domains for expiring, unauthorized, and invalid SSL certificates - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [Censys Search - Certificates](https://search.censys.io/#) - Certificates Search - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser -- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search +- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API ### WiFi Networks @@ -701,6 +697,12 @@ make, model, year of manufacture, engine size and all available information - [NetoGraph](https://netograph.io/) - Captures and indexes detailed, low-level snapshots of website behaviour - [Hashdd](https://hashdd.com/) - Known Good Cryptographic Hashes - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub +- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool +- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates +- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset +- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses + From 61a8342cf9f05702d5300529a52a4fdc6fd8c7f7 Mon Sep 17 00:00:00 2001 From: Anton Date: Thu, 3 Sep 2026 13:35:58 +0200 Subject: [PATCH 4/8] Fix review feedback --- README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 38f8de3..e198e48 100644 --- a/README.md +++ b/README.md @@ -343,7 +343,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search -- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API +- [ctlogs.dev](https://ctlogs.dev) - Find TLS/SSL certificates by domain, organization, serial, or fingerprint ### WiFi Networks @@ -699,11 +699,10 @@ make, model, year of manufacture, engine size and all available information - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub - [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [certs.io](https://certs.io/) - Search TLS certificates across the internet - [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - --- From 5efdd35da3d883f82da02a5f1f05328a50f806ac Mon Sep 17 00:00:00 2001 From: Tolga SEZER <19777824+projectboot@users.noreply.github.com> Date: Tue, 8 Sep 2026 21:01:57 +0300 Subject: [PATCH 5/8] Add Malwagon to Threat Intelligence --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..841d355 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [Malwagon](https://malwagon.com) - Search detonated malware samples by hash, IP, domain, URL, mutex, registry key or JA3/JA4 ### Web History From da0195fc879926a9794d5bbbe36c0a17af230043 Mon Sep 17 00:00:00 2001 From: nopnoppwn <325118948+nopnoppwn@users.noreply.github.com> Date: Tue, 8 Sep 2026 13:08:23 -0700 Subject: [PATCH 6/8] Add MerkleMap to Certificates --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..3c03059 100644 --- a/README.md +++ b/README.md @@ -348,6 +348,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates - [certs.io](https://certs.io/) - Search TLS certificates across the internet. - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search +- [MerkleMap](https://www.merklemap.com/) - Discover subdomains and SSL/TLS certificates from Certificate Transparency logs ### WiFi Networks From bfb38dfc5f8ff8d4ff28c92c8f326e487ee430a4 Mon Sep 17 00:00:00 2001 From: nopnoppwn <325118948+nopnoppwn@users.noreply.github.com> Date: Tue, 8 Sep 2026 15:24:50 -0700 Subject: [PATCH 7/8] Add Scamalytics to Threat Intelligence --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..4a661ce 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [Scamalytics](https://scamalytics.com) - IP address fraud scoring with VPN, proxy and TOR detection ### Web History From e605ebf8912a71e213407df0bd1ba0795b7e5772 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Wed, 30 Sep 2026 11:15:28 +0200 Subject: [PATCH 8/8] Update README.md --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 677d2d5..b0fc85f 100644 --- a/README.md +++ b/README.md @@ -384,7 +384,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ScatteredSecrets](https://scatteredsecrets.com/) - Search data breaches to see if your password has been compromised - [InfoStealers.info](https://infostealers.info/) - OSINT made simple. Instant insights from Infostealer data - [NiamonX PwnedLookup](https://niamonx.io/) - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations -- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach, with sources; free searches, developer API and chat bots +- [Lunar Cyber](https://lunarcyber.com/) - Free, enterprise-grade, compromised-credentials monitoring platform, available to every company ### Leaks @@ -406,6 +406,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [Offshore Leaks](https://offshoreleaks.icij.org/) - Find out who's behind more than 800000 offshore companies, foundations and trusts from ICIJ's investigations - [Venacus](https://venacus.com/) - Search across 70+ TB of data breaches and leaked documents - [Leaksyr](https://leaksyr.com/) - Enterprise-grade threat intelligence to identify compromised credentials and secure your digital assets against data breaches +- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach with sources ### Hidden Services