Attack Surface
Asset discovery, service search, DNS mapping, port probing, and exposure investigation tools.
14listings

ShodanFeatured
Search internet-exposed services.
OSINTVulnerability ManagementAttack Surface#exposure#banners#recon

Censys SearchFeatured
Internet asset and certificate search.
OSINTVulnerability ManagementAttack Surface#certificates#exposure#assets

FOFA
Cyberspace asset search.
OSINTVulnerability ManagementAttack Surface#assets#recon#exposure

Criminal IP
Attack surface and threat intelligence search.
Threat IntelligenceOSINTVulnerability ManagementAttack Surface#ip#exposure#phishing

SecurityTrails
DNS, WHOIS, and infrastructure history.
OSINTThreat IntelligenceAttack Surface#dns#whois#subdomains

DNSDumpster
DNS reconnaissance and subdomain mapping.
OSINTAttack Surface#dns#subdomains#recon

crt.sh
Certificate transparency search.
OSINTAttack Surface#certificates#subdomains#ct

Wappalyzer
Identify technologies on websites.
OSINTVulnerability ManagementAttack Surface#web-tech#fingerprinting#recon

NucleiFeatured
Fast template-based vulnerability scanning.
Vulnerability ManagementDetection EngineeringAttack Surface#templates#scanner#exposure

httpx
Fast HTTP probing toolkit.
OSINTVulnerability ManagementAttack Surface#http#recon#probing

Naabu
Fast port scanner.
OSINTVulnerability ManagementAttack Surface#ports#recon#scanner

Subfinder
Passive subdomain discovery.
OSINTVulnerability ManagementAttack Surface#subdomains#dns#recon