Internet-wide scan data on hosts, services and certificates, with a powerful query language. Strong for certificate pivoting and finding related infrastructure.
tools / fofa
FOFA
Cyberspace mapping search engine with rich fingerprinting (icon hash, cert, header, body). Strong coverage of Asian and Chinese hosts.
similar tools
Threat-focused internet asset search engine with IP and domain risk scoring, exposed services, vulnerabilities and screenshot reports.
HTTP probing toolkit that checks which hosts are live and grabs titles, status codes, tech stack, TLS details and favicon hashes in bulk.
Internet scan search engine covering hosts, DNS, WHOIS and certificates, with an attack surface discovery graph and a generous free tier.
Search engine for internet-connected devices. Query banners, open ports, SSL certs, favicons and vulnerabilities across the IPv4 space.
Chinese cyberspace search engine (Knownsec) that indexes devices and web services. Often has coverage of Asian infrastructure that Shodan misses.