HackTricks
Searchโ€ฆ
๐Ÿ‘ฝ
Network Services Pentesting
Online Platforms with API
Support HackTricks and get benefits!

โ€‹ProjectHoneypotโ€‹

You can ask if an IP is related to suspicious/malicious activities. Completely free.

โ€‹BotScoutโ€‹

Check if the IP address is related to a bot that register accounts. It can also check usernames and emails. Initially free.

โ€‹Hunterโ€‹

Find and verify emails. Some free API requests free, for more you need to pay. Commercial?

โ€‹AlientVaultโ€‹

Find Malicious activities related to IPs and Domains. Free.

โ€‹Clearbitโ€‹

Find related personal data to a email (profiles on other platforms), domain (basic company info ,mails and people working) and companies (get company info from mail). You need to pay to access all the possibilities. Commercial?

โ€‹BuiltWithโ€‹

Technologies used by webs. Expensive... Commercial?

โ€‹Fraudguardโ€‹

Check if a host (domain or IP) is related with suspicious/malicious activities. Have some free API access. Commercial?

โ€‹FortiGuardโ€‹

Check if a host (domain or IP) is related with suspicious/malicious activities. Have some free API access.

โ€‹SpamCopโ€‹

Indicates if host is related to spam activity. Have some free API access.

โ€‹mywotโ€‹

Based on opinions and other metrics get if a domain is related with suspicious/malicious information.

โ€‹ipinfoโ€‹

Obtains basic info from an IP address. You can test up to 100K/month.

โ€‹securitytrailsโ€‹

This platform give information about domains and IP addresses like domains inside an IP or inside a domain server, domains owned by an email (find related domains), IP history of domains (find the host behind CloudFlare), all domains using a nameserver.... You have some free access.

โ€‹fullcontactโ€‹

Allows to search by email, domain or company name and retrieve "personal" information related. It can also verify emails. There is some free access.

โ€‹RiskIQโ€‹

A lot of information from domains and IPs even in the free/community version.

โ€‹_IntelligenceXโ€‹

Search Domains, IPs and emails and get info from dumps. Have some free access.

โ€‹IBM X-Force Exchangeโ€‹

Search by IP and gather information related to suspicions activities. There is some free access.

โ€‹Greynoiseโ€‹

Search by IP or IP range and get information about IPs scanning the Internet. 15 days free access.

โ€‹Shodanโ€‹

Get scan information of an IP address. Have some free api access.

โ€‹Censysโ€‹

Very similar to shodan
Find open S3 buckets searching by keyword.

โ€‹Dehashedโ€‹

Find leaked credentials of emails and even domains Commercial?

โ€‹psbdmpโ€‹

Search pastebins where a email appeared. Commercial?

โ€‹emailrep.ioโ€‹

Get reputation of a mail. Commercial?

โ€‹ghostprojectโ€‹

Get passwords from leaked emails. Commercial?

โ€‹Binaryedgeโ€‹

Obtain interesting info from IPs

โ€‹haveibeenpwnedโ€‹

Search by domain and email and get if it was pwned and passwords. Commercial?
โ€‹https://dnsdumpster.com/(in a commercial tool?)
โ€‹https://www.netcraft.com/ (in a commercial tool?)
Support HackTricks and get benefits!
Copy link
On this page
ProjectHoneypot
BotScout
Hunter
AlientVault
Clearbit
BuiltWith
Fraudguard
FortiGuard
SpamCop
mywot
ipinfo
securitytrails
fullcontact
RiskIQ
_IntelligenceX
IBM X-Force Exchange
Greynoise
Shodan
Censys
buckets.grayhatwarfare.com
Dehashed
psbdmp
emailrep.io
ghostproject
Binaryedge
haveibeenpwned