聚合空间测绘搜索(Fofa,Zoomeye,Quake,Shodan,Censys,BinaryEdge)

Overview

#Search-Tools License

Search-Tools集合比较常见的网络空间探测引擎

Fofa,Zoomeye,Quake,Shodan,Censys,BinaryEdge

简单说明

  • ICO搜索目前只有Fofa,Shodan,Quake支持
  • 代理设置是防止在API请求过于频繁,或者在实战中,好多红队打开某一个搜索引擎,导致出口IP被封禁
  • 代理自动采集,或者从搜索引擎搜索相关的代理池
  • **存活代理IP日志保存一天,非存活代理IP保存2天 **
  • 从搜索引擎调取过来的数据保存5天
  • 第一是节省积分,第二可以观察拉取的数据结构
  • 最后有个信息比对结果
  • 想要开启代理需要先验证代理
  • Fofa,Quake的永久会员都很便宜
  • Shodan黑五1美元一个,淘宝也有很多卖的
  • censys,binaryedge都可以免费注册,但每个月只能查询250次
  • 大佬勿喷

使用指南

Python 3.9


1.IP ip=10.20.30.1 
2.Cidr ips=10.20.30.1/24 
3.Port port=443 
4.domain domain=XXX.com 
5.title title=xxxx 
6.header header=200 
7.body body=xxx
8.status_code status_code=200 
9.cert cert=huawei
10.protocol protocol=https

img

img

文件结构

│  README.md  # 说明文档
│  config.ini  # 配置文件
│  rule.json  # 集合搜索语句
│
├─temp
│  ├─binaryedge_search.log #存储binaryedge日志
│  ├─censys_search.log #存储censys日志
│  ├─fofa_search.log #存储fofa日志
│  ├─quake_search.log #存储quake日志
│  ├─shodan_search.log #存储shodan储日志
│  ├─zoomeye_search.log #存储zoomeye日志
│  ├─proxylist #存储存活代理IP
│  └─proxylist_unalive #存储非存活代理IP
│
└─icon
    └─xxx.ico # 存储Quake下载的ICO图标
You might also like...
External Network Pentest Automation using Shodan API and other tools.

Chopin External Network Pentest Automation using Shodan API and other tools. Workflow Input a file containing CIDR ranges. Converts CIDR ranges to ind

Search Shodan for Minecraft server IPs to grief

GriefBuddy This script searches Shodan for Minecraft server IPs to grief. This will return all servers connected to the public internet which Shodan h

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Shodan Quick Recon A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities Configuration You must edit the python code, and in

 Python script who crawl first shodan page and check DBLTEK vulnerability
Python script who crawl first shodan page and check DBLTEK vulnerability

🐛 MASS DBLTEK EXPLOIT CHECKER USING SHODAN 🕸 Python script who crawl first shodan page and check DBLTEK vulnerability

ShoLister - a tool that collects all available subdomains for specific hostname or organization from Shodan
ShoLister - a tool that collects all available subdomains for specific hostname or organization from Shodan

ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be used from Penetration Tester and Bug Bounty Hunters.

Comments
  • Modules suggestion

    Modules suggestion

    https://www.criminalip.io/ - Criminal IP is a specialized Cyber Threat Intelligence (CTI) search engine that allows users to search for various security-related information such as malicious IP addresses, domains, banners, etc. It can be widely integrated

    opened by parkjunmin 0
  • win10平台运行search_main报错QSpinBox' object has no attribute 'setStepType'

    win10平台运行search_main报错QSpinBox' object has no attribute 'setStepType'

    如题,在win10平台运行报错 AttributeError: 'QSpinBox' object has no attribute 'setStepType'; 定位到Ui_search中 self.start_time_spinBox.setStepType(QtWidgets.QAbstractSpinBox.AdaptiveDecimalStepType) 是是啥原因呢?

    将这句话注释掉后,能够出现界面,但是输入IP,点击搜索就闪退 Process finished with exit code -1073740791 (0xC0000409)

    opened by WillianWang2025 1
  • 一些小建议

    一些小建议

    目前试用了大佬您写的工具,有几个小建议 1、导出为表格,目前如果只搜索单IP来看,这个工具非常强大了,但涉及到网段或者大量结果的话,看起来就不太友好了 2、支持批量功能,搜索多个IP的时候,操作就不那么方便 3、为各种api添加自定义配置或者开关,像shodan api 有一定限制,不想用的时候需要每次临时关闭api之类的

    opened by 20142995 1
Releases(1.5.4.1)
Discord-Lite - A light weight discord client written in Python, for developers, by developers.

Discord-Lite - A light weight discord client written in Python, for developers, by developers.

Sachit 142 Jan 07, 2023
BT CCXT Store

bt-ccxt-store-cn backtrader是一个非常好的开源量化回测平台,我自己也时常用它,backtrader也能接入实盘,而bt-ccxt-store就是帮助backtrader接入数字货币实盘交易的一个插件,但是bt-ccxt-store的某些实现并不是很好,无节制的网络轮询,一些

moses 40 Dec 31, 2022
Moderation and Utility Discord bot.

Qrista An advanced Moderation and Utility Discord bot. Features Uses Hikari and Lightbulb as a command handler Advance Logging & Whole new enviroment

Blaze Camp 2 Jan 11, 2022
Translates English into Mandalorian (Mando'a) utilizing a "funtranslations" free API

Mandalorian Translator Translates English into Mandalorian (Mando'a) utilizing a "funtranslations" free API About I created this app to experiment wit

Hayden Covington 1 Dec 04, 2021
Discord group chat spammer concept.

GC Spammer [Concept] GC-Spammer for https://discord.com/ Warning: This is purely a concept. In the past the script worked, however, Discord ratelimite

Roover 3 Feb 28, 2022
Git Plan - a better workflow for git

git plan A better workflow for git. Git plan inverts the git workflow so that you can write your commit message first, before you start writing code.

Rory Byrne 178 Dec 11, 2022
Python client for QIWI payment system

Pyqiwi Lib for QIWI payment system Installation pip install pyqiwi Usage from decimal import Decimal from datetime import datetime, timedelta from p

Andrey 12 Jun 03, 2022
Códigos pela Força Bruta e Algoritmo Genético para o Problema da Mochila

O problema da mochila é um problema de optimização combinatória. O nome dá-se devido ao modelo de uma situação em que é necessário preencher uma mochi

Hemili Beatriz 1 Jan 08, 2022
Herramienta para transferir eventos de Sucuri WAF hacia Azure Blob Storage.

Transfiere eventos de Sucuri hacia Azure Blob Storage Script para transferir eventos del Sucuri Web Application Firewall (WAF) hacia Azure Blob Storag

CSIRT-RD 1 Dec 22, 2021
Editing a Tinder bot created by @frederikme

tinder_bot_edit Editing a Tinder bot created by @frederikme Table of Contents Basic Swipe Bot Basic Swipe Bot Download the code as a zip or clone the

Alex Carter 1 Nov 23, 2021
The purpose of this bot is to take soundcloud track requests, that are posted in the stream-requests channel, and add them to a playlist, to make the process of scrolling through the requests easier for Root

Discord Song Collector Dont know if anyone is actually going to read this, but the purpose of this bot is to check every message in the stream-request

2 Mar 01, 2022
Playing around with the slack api for learning purposes

SlackBotTest Playing around with the slack api for learning purposes and getting people to contribute Reason for this Project: Bots are very versatile

1 Nov 24, 2021
Pinopoly is a tool to remove the "banker" player and replace them with a digitalized system

Pinopoly is a tool to remove the "banker" player and replace them with a digitalized system. It is intended to be used on a Raspberry Pi but can be used in the command line as well.

Alex Overstreet 11 Jul 09, 2022
Simple Telegram Bot for generating BalckPearl BBCode Templates

blackpearl-bbcode-bot Simple Telegram Bot for generating BlackPearl BBCode Templates Written in Pyrogram Features - 🎉 IMDB Info fetching from files -

D. Luffy 5 Oct 19, 2022
Currency And Gold Prices - Currency And Gold Prices For Python

Currency_And_Gold_Prices Photos from the app New Update Show range Change better

Ali HemmatNia 4 Sep 19, 2022
Cloudkeeper is “housekeeping for clouds” - find leaky resources, manage quota limits, detect drift and clean up.

Cloudkeeper Housekeeping for Clouds! Table of contents Overview Docker based quick start Cloning this repository Component list Contact License Overvi

Some Engineering 1.2k Jan 03, 2023
A Discord Self bot written in python

WitheredBot A Discord Self bot written in python Requirement Python = 3.9 How to Configure git clone https://github.com/a-a-a-aa/WitheredBot.git cd W

......... 0 Jan 05, 2023
Tomli is a Python library for parsing TOML. Tomli is fully compatible with TOML v1.0.0.

Tomli A lil' TOML parser Table of Contents generated with mdformat-toc Intro Installation Usage Parse a TOML string Parse a TOML file Handle invalid T

Taneli Hukkinen 313 Dec 26, 2022
A Telegram Video Merge Bot by @AbirHasan2005

VideoMerge-Bot This is very simple Telegram Videos Merge Bot by @AbirHasan2005. Using FFmpeg for Merging Videos. Features: Merge Multiple Videos. User

Abir Hasan 57 Nov 12, 2022
AWS Enumeration and Footprinting Tool

Quiet Riot 🎶 C'mon, Feel The Noise 🎶 An enumeration tool for scalable, unauthenticated validation of AWS principals; including AWS Acccount IDs, roo

Wes Ladd 89 Jan 05, 2023