projectdiscovery/uncover

Health v2 · maintenance only

Adoption not part of the score

3042 stars · 273 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

uncover is a Go CLI tool that queries multiple internet search engines (Shodan, Censys, FOFA, ZoomEye, and others) via their APIs to quickly discover exposed hosts on the internet. It is built for automation with stdin/stdout support so results can be piped into existing recon pipelines.

Use cases

• find exposed hosts on the internet
• run reconnaissance for bug bounty targets
• query shodan and censys from the command line
• build an attack surface inventory for my domains
• pipe search engine results into my recon pipeline
• search multiple OSINT engines at once with one query

When to choose

• you need to aggregate host discovery results from many search engines in one query
• you want a scriptable CLI that fits into automated recon pipelines
• you do bug bounty or attack surface management and need broad internet-wide search coverage

When to avoid

• you need deep vulnerability scanning or exploitation rather than host discovery
• you have no API keys for any supported search engines
• you want a GUI-based OSINT platform instead of a command-line tool

Facets

cli-tool · maturity active

search-engine osint http-client cli developer-tools security osint developer-tools windows cli go recon attack-surface-management bug-bounty exposed-hosts shodan censys fofa reconnaissance command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="projectdiscovery/uncover")