From: https://twitter.com/danielmakelley/status/1591389408577654784
- Dehashed — View leaked credentials.
- SecurityTrails — Extensive DNS data.
- DorkSearch — Really fast Google dorking.
- ExploitDB — Archive of various exploits.
- ZoomEye — Gather information about targets.
- Pulsedive — Search for threat intelligence.
- GrayHatWarfare — Search public S3 buckets.
- PolySwarm — Scan files and URLs for threats.
- Fofa — Search for various threat intelligence.
- LeakIX — Search publicly indexed information.
- DNSDumpster — Search for DNS records quickly.
- FullHunt — Search and discovery attack surfaces.
- AlienVault — Extensive threat intelligence feed.
- ONYPHE — Collects cyber-threat intelligence data.
- Grep App — Search across a half million git repos.
- URL Scan — Free service to scan and analyse websites.
- Vulners — Search vulnerabilities in a large database.
- WayBackMachine — View content from deleted websites.
- Shodan — Search for devices connected to the internet.
- Netlas — Search and monitor internet connected assets.
- CRT sh — Search for certs that have been logged by CT.
- Wigle — Database of wireless networks, with statistics.
- PublicWWW — Marketing and affiliate marketing research.
- Binary Edge — Scans the internet for threat intelligence.
- GreyNoise — Search for devices connected to the internet.
- Hunter — Search for email addresses belonging to a website.
- Censys — Assessing attack surface for internet connected devices.
- IntelligenceX — Search Tor, I2P, data leaks, domains, and emails.
- Packet Storm Security — Browse latest vulnerabilities and exploits.
- SearchCode — Search 75 billion lines of code from 40 million projects.