Awesome Hacker Search Engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Mail addresses • Domains • URLs • DNS • Certificates • WiFi networks • Credentials • Social Networks • Phone numbers • Threat Intelligence

General Search Engines

• Google
• Bing
• Yahoo!
• Yandex

Servers

• Shodan - Search Engine for the Internet of Everything
• Censys
• Onyphe.io
• ZoomEye
• GreyNoise
• Natlas
• FOFA

Vulnerabilities

• NIST NVD
• MITRE CVE
• osv.dev - Open Source Vulnerabilities
• Vulners.com
• Rapid7 - DB
• CVEDetails

Exploits

• Exploit-DB
• Sploitus
• Rapid7 - DB

Attack Surface

• FullHunt.io
• BynaryEdge
• RedHunt Labs
• SecurityTrails

Code Search Engines

• GitHub Code Search
• grep.app
• publicwww.com
• SearchCode
• NerdyData
• RepoSearch

Mail addresses

• Hunter.io
• PhoneBook
• IntelligenceX
• RocketReach

Domains

• PhoneBook
• IntelligenceX
• Omnisint - Subdomain enumeration
• Riddler

URLs

• PhoneBook
• IntelligenceX
• URLScan

DNS

• DNSDumpster
• RapidDNS
• DNSdb
• Omnisint - Reverse DNS lookup

Certificate Search

• Crt.sh
• CTSearch
• TLS.BufferOver.run

WiFi networks

• Wigle.net

Credentials

• Have I Been Pwned
• Dehashed
• Leak-Lookup
• Snusbase

Social Networks

These can be useful for osint and social engineering.

• Facebook
• Instagram
• YouTube
• Twitter
• LinkedIn
• Reddit
• Pinterest
• Tumblr
• Flickr
• SnapChat
• Whatsapp
• Quora
• TikTok
• Vimeo
• Medium
• WeChat
• VK
• Weibo
• Tinder

Phone numbers

• RocketReach
• NumLookup
• WhitePages

Threat Intelligence

• PulseDive
• ThreatCrowd
• ThreatMiner
• VirusTotal

Unclassified

• Web Archive
• SynapsInt
• Spyse
• NetoGraph
• AlienVault
• Archive.ph
• DNS.BufferOver.run
• C99.nl
• CertSpotter
• Chaos
• CommonCrawl
• HackerTarget
• PassiveTotal
• RobTex
• SiteDossier

---

If you want to propose changes, just open an issue.