FOFAen.fofa.info
Cyberspace mapping search engine with rich fingerprinting (icon hash, cert, header, body). Strong coverage of Asian and Chinese hosts.
ip / asndomaindetails
tools / httpx
httpx
HTTP probing toolkit that checks which hosts are live and grabs titles, status codes, tech stack, TLS details and favicon hashes in bulk.
freeactiveosscli
field note
The favicon mmh3 hash it outputs can be searched in Shodan (http.favicon.hash:) to find other servers running the same app.
opsec warning
This tool is active: it interacts directly with the target's infrastructure or may otherwise reveal your interest to the target. Use a research environment and weigh the risk before running it.
used in playbooks
similar tools
urlscan.iourlscan.io
Sandbox that loads a URL and records the requests, IPs, domains, screenshots and DOM. Its search across millions of past scans is a pivot goldmine.
urldomainip / asndetails
VirusTotalvirustotal.com
Scans files, URLs, domains and IPs against 70+ engines. The relations graph shows passive DNS, communicating files, subdomains and historical WHOIS.
file / docurldomainip / asndetails
Wappalyzerwappalyzer.com
Browser extension and lookup service that identifies technologies on websites, such as frameworks, CMS, analytics, CDNs and e-commerce platforms.
domainurldetails
AlienVault OTXotx.alienvault.com
LevelBlue (formerly AT&T) Open Threat Exchange. Community threat pulses, passive DNS and indicator lookups for IPs, domains, hashes and URLs.
ip / asndomainfile / docurldetails
Intelligence Xintelx.io
Search engine and archive of leaks, pastes, dark-web pages, and historical data. Supports email, domain, IP, CIDR, URL, and crypto address selectors.
emaildomainip / asnurlcryptophonedetails