|
1 | | -# Cyber Search |
2 | | - |
3 | | -## **Cyber Search Engines and Internet Scanners** |
4 | | - |
5 | | -* [Shodan](https://www.shodan.io/) - Shodan is often called the "Hacker's Search Engine". Shodan has servers scanning the entire internet for devices. Once it finds them, it maps their ports and collects other useful information. Shodan has advanced search commands similar to google dorks. Shodan also has a flexible API that can be leveraged into many other tools. |
6 | | - * [https://cli.shodan.io/](https://cli.shodan.io/) |
7 | | - * [https://beta.shodan.io/search/filters](https://beta.shodan.io/search/filters) |
8 | | - * [https://tryhackme.com/room/shodan](https://tryhackme.com/room/shodan) |
9 | | - * Shodan Dorking |
10 | | - * [Awesome List Collection: Shodan Queries](https://github.com/jakejarvis/awesome-shodan-queries) |
11 | | - * [https://github.com/daffainfo/AllAboutBugBounty/blob/master/Recon/Shodan%20Dorks.md](https://github.com/daffainfo/AllAboutBugBounty/blob/master/Recon/Shodan%20Dorks.md) |
12 | | - * [https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/1-part-100-article/google/Shodan%20Queries.txt](https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/1-part-100-article/google/Shodan%20Queries.txt) |
13 | | - * [https://github.com/humblelad/Shodan-Dorks](https://github.com/humblelad/Shodan-Dorks) |
14 | | - * [https://github.com/AustrianEnergyCERT/ICS\_IoT\_Shodan\_Dorks](https://github.com/AustrianEnergyCERT/ICS\_IoT\_Shodan\_Dorks) |
15 | | - * [https://github.com/lothos612/shodan](https://github.com/lothos612/shodan) |
16 | | - * [https://github.com/IFLinfosec/shodan-dorks](https://github.com/IFLinfosec/shodan-dorks) |
17 | | - * [https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/](https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/) |
18 | | - * _Operator Handbook: Shodan CLI - pg. 274_ |
| 1 | +# Cyber Search Engines |
| 2 | + |
| 3 | +## [Shodan](https://www.shodan.io/)  |
| 4 | + |
| 5 | +Shodan is often called the "Hacker's Search Engine". Shodan has servers scanning the entire internet for devices. Once it finds them, it maps their ports and collects other useful information. Shodan has advanced search commands similar to google dorks. Shodan also has a flexible API that can be leveraged into many other tools. |
| 6 | + |
| 7 | +* [https://cli.shodan.io/](https://cli.shodan.io/) |
| 8 | +* [https://beta.shodan.io/search/filters](https://beta.shodan.io/search/filters) |
| 9 | +* [https://tryhackme.com/room/shodan](https://tryhackme.com/room/shodan) |
| 10 | +* _Operator Handbook: Shodan CLI - pg. 274_ |
| 11 | + |
| 12 | +<details> |
| 13 | + |
| 14 | +<summary>Shodan Dorking</summary> |
| 15 | + |
| 16 | +* [Awesome List Collection: Shodan Queries](https://github.com/jakejarvis/awesome-shodan-queries) |
| 17 | +* [https://github.com/daffainfo/AllAboutBugBounty/blob/master/Recon/Shodan%20Dorks.md](https://github.com/daffainfo/AllAboutBugBounty/blob/master/Recon/Shodan%20Dorks.md) |
| 18 | +* [https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/1-part-100-article/google/Shodan%20Queries.txt](https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/1-part-100-article/google/Shodan%20Queries.txt) |
| 19 | +* [https://github.com/humblelad/Shodan-Dorks](https://github.com/humblelad/Shodan-Dorks) |
| 20 | +* [https://github.com/AustrianEnergyCERT/ICS\_IoT\_Shodan\_Dorks](https://github.com/AustrianEnergyCERT/ICS\_IoT\_Shodan\_Dorks) |
| 21 | +* [https://github.com/lothos612/shodan](https://github.com/lothos612/shodan) |
| 22 | +* [https://github.com/IFLinfosec/shodan-dorks](https://github.com/IFLinfosec/shodan-dorks) |
| 23 | +* [https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/](https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/) |
| 24 | + |
| 25 | +</details> |
19 | 26 |
|
20 | 27 | {% embed url="https://youtu.be/v2EdwgX72PQ" %} |
21 | 28 |
|
| 29 | +## Cyber Search Tools |
| 30 | + |
| 31 | +<details> |
| 32 | + |
| 33 | +<summary>Internet Asset Search Engines</summary> |
| 34 | + |
| 35 | +Asset Search Engines are fantastic tools that regular scan the internet taking inventory of every entity that they can detect. Using large networks of sensors and scanners, they can document items like registration information, open ports, documented network traffic, and much more. |
| 36 | + |
22 | 37 | * [Spyse](https://spyse.com/) - The Internet Asset Search Engine. Spyse has some advanced scanning features that can allow you to discover seen vulnerabilities by CVE score or subdomains, on top of detailed metadata on your target. With its heavy toolset and API functionality, it is a popular choice for automated enrichment. |
23 | 38 | * [https://fullhunt.io/](https://fullhunt.io/) - **FullHunt** is the attack surface database of the entire Internet. |
24 | 39 | * [Maltiverse](https://maltiverse.com/search) - A search engine for threat based indicators. Maltiverse also has multiple threat feeds you can ingest into your intel platform for alerting. |
25 | | -* [Onyphe](https://www.onyphe.io/) - A Cyber Defense Search Engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise. ONYPHE does correlate this information with data gathered by performing active Internet scanning for connected devices and also by crawling Web site URLs. |
| 40 | +* [Onyphe](https://www.onyphe.io/) - A Cyber Defense Search Engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise. ONYPHE does correlate this information with data gathered by performing active Internet scanning for connected devices and also by crawling Web site URLs.  |
26 | 41 | * [https://www.onyphe.io/documentation/dorkpedia](https://www.onyphe.io/documentation/dorkpedia) |
| 42 | + |
| 43 | +<!----> |
| 44 | + |
27 | 45 | * [IntellX](https://intelx.io/) - Search Engine that allows searching with selectors, i.e. specific search terms such as email addresses, domains, URLs, IPs, CIDRs, Bitcoin addresses, IPFS hashes, etc. It searches in places such as the darknet, document sharing platforms, whois data, public data leaks and others. It also keeps a historical data archive of results, similar to how the Wayback Machine from archive.org stores historical copies of websites. |
28 | 46 | * [https://synapsint.com/](https://synapsint.com/) - The unified OSINT research tool that allows you to search for various data points about different indicators. |
29 | 47 | * [https://natlas.io/](https://natlas.io/) - Scaling Network Scanning Utility |
|
40 | 58 | * [https://leakix.net/](https://leakix.net/) - Search LeakIX for host data leaks, open ports, software and geoip. |
41 | 59 | * [Riddler](https://riddler.io/) - Allows you to search in a high quality dataset |
42 | 60 |
|
43 | | -### Favicon tools |
| 61 | +</details> |
| 62 | + |
| 63 | +<details> |
| 64 | + |
| 65 | +<summary>Favicon tools</summary> |
44 | 66 |
|
45 | 67 | * [FavFreak](https://github.com/devanshbatham/FavFreak) - Weaponizing favicon.ico for BugBounties , OSINT and what not |
46 | 68 | * [https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139](https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139) |
47 | 69 | * [fav-up](https://github.com/pielco11/fav-up) - IP lookup by favicon using Shodan. Helps to find IP addresses hidden behind Cloudflare |
48 | 70 | * [https://pielco11.ovh/posts/cloud-hunting/](https://pielco11.ovh/posts/cloud-hunting/) |
49 | 71 | * [https://besticon.herokuapp.com/](https://besticon.herokuapp.com/) - A service finding icons on web sites |
| 72 | + |
| 73 | +</details> |
0 commit comments