Passive Information Gathering Tools

ExploitDB GoogleDorks Link:

OffSec’s Exploit Database Archivewww.exploit-db.com

DorkSearch:

DorkSearch - Speed up your Google Dorkingdorksearch.com

SubDNS Tools:

https://searchdns.netcraft.com/searchdns.netcraft.com

For Github (and on Scale)

We can use several tools to help automate some of the searching, such as Gitrob and Gitleaks.

Note: You need an access token to use the source code-hosting provider's API.

For Github (manual searching)

For searching repos of a single user

owner:username 

For searching keyword in path:

path:users

More Dorks: https://github.com/cipher387/Dorks-collections-list?tab=readme-ov-file#github-dorks

Shodan

https://www.shodan.io/www.shodan.io

Some useful filters:

hostname:google.com

Security Headers

Analyse your HTTP response headerssecurityheaders

SSL Server Test (Powered by Qualys SSL Labs)www.ssllabs.com