Internet exposure search

What have internet-wide scanners already recorded about these hosts?

Services like Shodan and Censys scan the whole internet continuously. Querying their indexes shows open services and banners without sending a packet to the target yourself.

Listed alphabetically. The order is not a ranking.

• MetabigorPassive

  OSINT CLI that maps IP ranges, certificate subdomains, related domains, archived URLs and CDN use from free sources, no API key needed.

  1.9k stars · last push August 8, 2026 · v2.2.0 · MIT

• uncoverPassive

  Queries Shodan, Censys, FOFA and other internet search engine APIs at once to list exposed hosts and ports.

  3.1k stars · last push November 9, 2026 · v1.2.1 · MIT