From 364f029204021b49e16ffbd0c6555388547427e9 Mon Sep 17 00:00:00 2001 From: eduair94 <49965850+eduair94@users.noreply.github.com> Date: Sun, 5 Jul 2026 19:42:33 -0300 Subject: [PATCH 01/15] Add CheckLeaked to Credentials CheckLeaked (checkleaked.cc) is a data-breach search engine that checks whether an email, username or phone appears in leaks, showing the sources. Fits alongside Have I Been Pwned, Dehashed and LeakCheck.io. Co-Authored-By: Claude Opus 4.8 --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8661ae2..a555206 100644 --- a/README.md +++ b/README.md @@ -382,6 +382,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ScatteredSecrets](https://scatteredsecrets.com/) - Search data breaches to see if your password has been compromised - [InfoStealers.info](https://infostealers.info/) - OSINT made simple. Instant insights from Infostealer data - [NiamonX PwnedLookup](https://niamonx.io/) - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations +- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach, with sources; free searches, developer API and chat bots ### Leaks From a62726a9e35c0eab8c2935301c3019b2cf82527b Mon Sep 17 00:00:00 2001 From: KaseMaster Date: Wed, 15 Jul 2026 22:35:25 +0200 Subject: [PATCH 02/15] Add Argos OSINT to Domains section --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index e47abbf..56c650b 100644 --- a/README.md +++ b/README.md @@ -283,6 +283,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [NetCraft SearchDNS](https://searchdns.netcraft.com/) - Search Web by Domain - [SpoofChecker](https://spoofchecker.com/) - Spoof Checker detects typosquats and spoofed domains to protect your brand from phishing, fraud, and BEC scams - [Cerast Intelligence](https://search.cerast-intelligence.com/) - Search a domain for exposed paths and misconfigurations found by continuous internet-wide scanning +- [Argos OSINT](https://argos-osint.com/dominio/) - Free unified domain intel dashboard combining WHOIS/RDAP, DoH DNS resolution and subdomain enumeration via crt.sh in a single client-side panel. Spanish-first. ### URLs From 6f597efd3146eb0abbe9533d7d06a7fd292f50e7 Mon Sep 17 00:00:00 2001 From: Anton Date: Wed, 2 Sep 2026 23:27:50 +0200 Subject: [PATCH 03/15] Move 5 dead links to Not working / Paused, add ctlogs.dev MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Four hosts no longer resolve: CTSearch — ui.ctsearch.entrust.com — no A record certs.io — SERVFAIL AskDNS — askdns.com — NXDOMAIN Riddler — riddler.io — no A record FacebookCT returns a hard 404 — Meta retired the tool, the page is gone. All five moved to Not working / Paused, inside the link-check-disabled block, rather than deleted. Also added ctlogs.dev to Certificates. Disclosure — I built it, happy to split this into two PRs. --- README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 2e5239e..38f8de3 100644 --- a/README.md +++ b/README.md @@ -249,7 +249,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [PhoneBook](https://phonebook.cz/) - Lists all domains, email addresses, or URLs for the given input domain - [IntelligenceX](https://intelx.io/) - Search engine and data archive - [Omnisint](https://omnisint.io/subdomain-enumeration) - Subdomain enumeration -- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [RobTex](https://www.robtex.com/) - Various kinds of research of IP numbers, Domain names, etc - [CentralOps - DomainDossier](https://centralops.net/co/DomainDossier.aspx) - Investigate domains and IP addresses - [DomainIQ](https://www.domainiq.com/) - Comprehensive Domain Intelligence @@ -324,7 +323,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [dnsrepo.noc.org](https://dnsrepo.noc.org/) - DNS Database Repository Search - [DNSSpy](https://dnsspy.io/) - Monitor, validate and verify your DNS configurations - [ZETAlytics](https://zetalytics.com/) - We offer unrivalled geographic diversity and exclusive global network visibility in searchable datasets for use by cyber security analysts -- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - [360 PassiveDNS.CN](https://passivedns.cn/) - Biggest public available db in China designed for security and research purpose - [MXtoolbox](https://mxtoolbox.com/SuperTool.aspx) - All of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool - [NSLookup.io](https://www.nslookup.io/) - Find all DNS records for a domain name using this online tool @@ -338,16 +336,14 @@ A curated list of awesome search engines useful during Penetration testing, Vuln ### Certificates - [Crt.sh](https://crt.sh/) - Certificate Search -- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [tls.bufferover.run](https://tls.bufferover.run/) - Quickly find certificates in IPv4 space - [CertSpotter](https://sslmate.com/certspotter/) - Monitors your domains for expiring, unauthorized, and invalid SSL certificates - [SynapsInt](https://synapsint.com/) - The unified OSINT research tool - [Censys Search - Certificates](https://search.censys.io/#) - Certificates Search - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser -- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search +- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API ### WiFi Networks @@ -701,6 +697,12 @@ make, model, year of manufacture, engine size and all available information - [NetoGraph](https://netograph.io/) - Captures and indexes detailed, low-level snapshots of website behaviour - [Hashdd](https://hashdd.com/) - Known Good Cryptographic Hashes - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub +- [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool +- [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates +- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset +- [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses + From 61a8342cf9f05702d5300529a52a4fdc6fd8c7f7 Mon Sep 17 00:00:00 2001 From: Anton Date: Thu, 3 Sep 2026 13:35:58 +0200 Subject: [PATCH 04/15] Fix review feedback --- README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 38f8de3..e198e48 100644 --- a/README.md +++ b/README.md @@ -343,7 +343,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ciphersuite.info](https://ciphersuite.info/) - TLS Ciphersuite Search. Search for a particular cipher suite by using IANA, OpenSSL or GnuTLS name format - [certificatedetails](https://certificatedetails.com/) - Online certificate viewer. Inspect and download certificates from your browser - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search -- [ctlogs.dev](https://ctlogs.dev)- Certificate Transparency Search & Free CT Logs API +- [ctlogs.dev](https://ctlogs.dev) - Find TLS/SSL certificates by domain, organization, serial, or fingerprint ### WiFi Networks @@ -699,11 +699,10 @@ make, model, year of manufacture, engine size and all available information - [CVE Trends](https://cvetrends.com/) - Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub - [CTSearch](https://ui.ctsearch.entrust.com/ui/ctsearchui) - Certificate Transparency Search Tool - [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates -- [certs.io](https://certs.io/) - Search TLS certificates across the internet. +- [certs.io](https://certs.io/) - Search TLS certificates across the internet - [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset - [AskDNS](https://askdns.com/) - Lookup Connected Domain Names and IP Addresses - --- From 5efdd35da3d883f82da02a5f1f05328a50f806ac Mon Sep 17 00:00:00 2001 From: Tolga SEZER <19777824+projectboot@users.noreply.github.com> Date: Tue, 8 Sep 2026 21:01:57 +0300 Subject: [PATCH 05/15] Add Malwagon to Threat Intelligence --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..841d355 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [Malwagon](https://malwagon.com) - Search detonated malware samples by hash, IP, domain, URL, mutex, registry key or JA3/JA4 ### Web History From da0195fc879926a9794d5bbbe36c0a17af230043 Mon Sep 17 00:00:00 2001 From: nopnoppwn <325118948+nopnoppwn@users.noreply.github.com> Date: Tue, 8 Sep 2026 13:08:23 -0700 Subject: [PATCH 06/15] Add MerkleMap to Certificates --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..3c03059 100644 --- a/README.md +++ b/README.md @@ -348,6 +348,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [FacebookCT](https://developers.facebook.com/tools/ct/search/) - Search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates - [certs.io](https://certs.io/) - Search TLS certificates across the internet. - [ODIN Certificates Search](https://getodin.com/search/certificates) - ODIN Certificates Search +- [MerkleMap](https://www.merklemap.com/) - Discover subdomains and SSL/TLS certificates from Certificate Transparency logs ### WiFi Networks From bfb38dfc5f8ff8d4ff28c92c8f326e487ee430a4 Mon Sep 17 00:00:00 2001 From: nopnoppwn <325118948+nopnoppwn@users.noreply.github.com> Date: Tue, 8 Sep 2026 15:24:50 -0700 Subject: [PATCH 07/15] Add Scamalytics to Threat Intelligence --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..4a661ce 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [Scamalytics](https://scamalytics.com) - IP address fraud scoring with VPN, proxy and TOR detection ### Web History From d365e271ce151a87aae12d474d7642939c68c05e Mon Sep 17 00:00:00 2001 From: tachalas Date: Mon, 21 Sep 2026 12:31:04 +0200 Subject: [PATCH 08/15] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..5c370c1 100644 --- a/README.md +++ b/README.md @@ -288,6 +288,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [DomScan](https://domscan.net/tools/security) - Domain intelligence and attack-surface checks across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting - [CC.LA](https://cc.la) - Free online toolkit for WHOIS, RDAP, DNS, IP WHOIS, SSL certificates, name server history, and network diagnostics (ping/traceroute/MTR) - [ctr.name](https://crt.name/) - Give it an apex domain and you get every subdomain on file +- [Fraudpol Scan](https://fraudpol.com/scan) - Find registered lookalike domains of a brand via certificate transparency logs and check their DNS, MX and website status ### URLs From e0a90de8647621a98fb169b71f15a59bab0ffc29 Mon Sep 17 00:00:00 2001 From: Jonas Lejon Date: Sat, 26 Sep 2026 12:46:25 +0200 Subject: [PATCH 09/15] Add ScanMalware to URLs --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..c6da424 100644 --- a/README.md +++ b/README.md @@ -304,6 +304,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [web-check.xyz](https://web-check.xyz/) - All-in-one OSINT tool, for quickly checking a websites data - [TinyScan](https://www.tiny-scan.com/) - Effortlessly Dive into URL Details - [urldna.io](https://urldna.io/) - Unleash website insights! urldna.io analyzes data, monitors brands and exposes security risks +- [ScanMalware](https://scanmalware.com/) - Scans URLs in a sandboxed browser and indexes the results for search by domain, IP, ASN, JARM and favicon hash ### DNS From acf6fc796a8d2aba02eb61aa7d0a92eab2e21d31 Mon Sep 17 00:00:00 2001 From: Benjaminsen Date: Sat, 26 Sep 2026 13:35:32 +0200 Subject: [PATCH 10/15] Add Barcodepedia to Unclassified --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..7af6d30 100644 --- a/README.md +++ b/README.md @@ -695,6 +695,7 @@ make, model, year of manufacture, engine size and all available information - [CanIUse.com](https://caniuse.com/) - Browser support tables for modern web technologies - [Known Agents](https://knownagents.com/) - Track and Control Artificial Agents Crawling Your Website - [Not Human Search](https://nothumansearch.ai) - Search engine for AI agent tools and infrastructure. Indexes 1,750+ sites ranked by agentic readiness score with REST API and MCP server +- [Barcodepedia](https://barcodepedia.com/) - Search products by EAN/UPC barcode, brand or company and see who owns the brand, who makes it under licence and who registered the barcode, with every fact cited ### Not working / Paused From 7986650e2538cbc725a163cc96df87c54dd5b57b Mon Sep 17 00:00:00 2001 From: Jean-Vincent QUILICHINI Date: Tue, 29 Sep 2026 19:49:40 +0200 Subject: [PATCH 11/15] Add isMalicious to Threat Intelligence Co-Authored-By: Claude Opus 5.5 --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f71db6..2542506 100644 --- a/README.md +++ b/README.md @@ -588,6 +588,7 @@ These can be useful for osint and social engineering. - [KleenScan](https://kleenscan.biz/index) - Analyze files to detect malware. Analyze URLs, domains, and IPs to detect malware and blacklist status - [ClawSearch](https://clawsearch.cc) - Security-first AI agent skill search engine. Find safe skills with Trust Score, 10-language search and pre-install security check - [detection.wiki](https://detection.wiki/) - Detection Rule and Telemetry Catalog +- [isMalicious](https://ismalicious.com/) - Check the reputation of IP addresses, domains, URLs and file hashes, with a REST API and CVE pages (CVSS, EPSS, CISA KEV) ### Web History From e605ebf8912a71e213407df0bd1ba0795b7e5772 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Wed, 30 Sep 2026 11:15:28 +0200 Subject: [PATCH 12/15] Update README.md --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 677d2d5..b0fc85f 100644 --- a/README.md +++ b/README.md @@ -384,7 +384,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [ScatteredSecrets](https://scatteredsecrets.com/) - Search data breaches to see if your password has been compromised - [InfoStealers.info](https://infostealers.info/) - OSINT made simple. Instant insights from Infostealer data - [NiamonX PwnedLookup](https://niamonx.io/) - AI-powered platform for credential leak monitoring, infostealer intelligence and breach investigations -- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach, with sources; free searches, developer API and chat bots +- [Lunar Cyber](https://lunarcyber.com/) - Free, enterprise-grade, compromised-credentials monitoring platform, available to every company ### Leaks @@ -406,6 +406,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [Offshore Leaks](https://offshoreleaks.icij.org/) - Find out who's behind more than 800000 offshore companies, foundations and trusts from ICIJ's investigations - [Venacus](https://venacus.com/) - Search across 70+ TB of data breaches and leaked documents - [Leaksyr](https://leaksyr.com/) - Enterprise-grade threat intelligence to identify compromised credentials and secure your digital assets against data breaches +- [CheckLeaked](https://checkleaked.cc/) - Check if an email, username or phone appears in a data breach with sources ### Hidden Services From 163c408d92184caf872ad0dde1151ea22cd830e7 Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Wed, 30 Sep 2026 11:43:36 +0200 Subject: [PATCH 13/15] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 9412c14..36c2241 100644 --- a/README.md +++ b/README.md @@ -179,6 +179,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [APIfreaks.com](https://apifreaks.com/) - Unified API hub providing DNS, WHOIS, IP geolocation, screenshots and commodity data APIs for developers and security teams - [HackMyIP](https://hackmyip.com/) - Free privacy and security toolkit with 19+ tools including IP lookup, DNS lookup, DNS leaks test and many others - [lookup.disclose.io](https://lookup.disclose.io/) - Find who owns any internet asset and the right security & disclosure contact +- [db-ip](https://db-ip.com/) - IP geolocation API and database ### Code From 10ba5088f640a2e80bfe74e8ef62a4025ff2e89a Mon Sep 17 00:00:00 2001 From: PageSourceSearch Date: Wed, 30 Sep 2026 15:05:35 +0400 Subject: [PATCH 14/15] Add PageSourceSearch to Code --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 36c2241..559c746 100644 --- a/README.md +++ b/README.md @@ -190,6 +190,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [publicwww.com](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code - [SearchCode](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects - [NerdyData](https://www.nerdydata.com/) - Find companies based on their website's tech stack or code +- [PageSourceSearch](https://www.pagesourcesearch.com/) - Search the HTML and first-party JavaScript of websites by exact string or regular expression - [RepoSearch](http://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code - [SourceGraph](https://about.sourcegraph.com/) - Understand and search across your entire codebase - [HotExamples](https://hotexamples.com/) - Search code examples from over 1 million projects From 1f099e5bb358c9b29b46ef9794083df0596bb9ed Mon Sep 17 00:00:00 2001 From: Edoardo Ottavianelli Date: Wed, 30 Sep 2026 16:10:25 +0200 Subject: [PATCH 15/15] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 559c746..3f2669f 100644 --- a/README.md +++ b/README.md @@ -190,7 +190,6 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [publicwww.com](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code - [SearchCode](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects - [NerdyData](https://www.nerdydata.com/) - Find companies based on their website's tech stack or code -- [PageSourceSearch](https://www.pagesourcesearch.com/) - Search the HTML and first-party JavaScript of websites by exact string or regular expression - [RepoSearch](http://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code - [SourceGraph](https://about.sourcegraph.com/) - Understand and search across your entire codebase - [HotExamples](https://hotexamples.com/) - Search code examples from over 1 million projects @@ -215,6 +214,7 @@ A curated list of awesome search engines useful during Penetration testing, Vuln - [RapidAPI Public Hub](https://rapidapi.com/hub) - Explore the world's largest API marketplace - [Repogrep](https://app.ami.dev/repogrep) - AI coding agent that can search across any public GitHub repository - [SearchWebCode](https://www.searchwebcode.com/) - Exact-string and regex search over the HTML, JS and CSS of 127 million website homepages +- [PageSourceSearch](https://www.pagesourcesearch.com/) - Search the HTML and first-party JavaScript of websites by exact string or regular expression ### Email Addresses