Shodanshodan.io
Search engine for internet-connected devices. Query banners, open ports, SSL certs, favicons and vulnerabilities across the IPv4 space.
ip / asndomaincompanylocationdetails
tools / censys
Censys
Internet-wide scan data on hosts, services and certificates, with a powerful query language. Strong for certificate pivoting and finding related infrastructure.
freemiumacct optionalapiweb
our take
- ★1 ip / asnexpensive but amazing
used in playbooks
similar tools
Criminal IPcriminalip.io
Threat-focused internet asset search engine with IP and domain risk scoring, exposed services, vulnerabilities and screenshot reports.
ip / asndomaindetails
BBOTgithub.com
Recursive internet scanner that chains 100+ modules for subdomain enumeration, web spidering and email harvesting. Has a passive-only preset.
domainip / asncompanydetails
FOFAen.fofa.info
Cyberspace mapping search engine with rich fingerprinting (icon hash, cert, header, body). Strong coverage of Asian and Chinese hosts.
ip / asndomaindetails
Netlasnetlas.io
Internet scan search engine covering hosts, DNS, WHOIS and certificates, with an attack surface discovery graph and a generous free tier.
ip / asndomaindetails
OWASP Amassgithub.com
In-depth attack surface mapping and subdomain discovery. Combines passive sources with optional DNS brute-forcing, permutations and ASN or netblock expansion.
domainip / asncompanydetails