# projectdiscovery/uncover

Quickly discover exposed hosts on the internet using multiple search engines.

Repository: https://github.com/projectdiscovery/uncover
Canonical: https://ross.abutalabs.com/products/uncover
Language: Go
License: MIT
License Family: permissive
Topics: asm, attack-surface, bugbounty, cli, osint, recon, reconnaissance, hacktoberfest
Last push: 2026-08-05T10:12:12+00:00

## Health v2 (maintenance only)
Score: 84/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 96, release rhythm 60, longevity 100
- inputs: {"age_days": 1645, "days_push": 28, "days_rel": 105, "gap_med": 159, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3042, forks 273 (observed 2026-08-28T04:07:39.367972+00:00)

## What it is
uncover is a Go CLI tool that queries multiple internet search engines (Shodan, Censys, FOFA, ZoomEye, and others) via their APIs to quickly discover exposed hosts on the internet. It is built for automation with stdin/stdout support so results can be piped into existing recon pipelines.

## Use cases
- find exposed hosts on the internet
- run reconnaissance for bug bounty targets
- query shodan and censys from the command line
- build an attack surface inventory for my domains
- pipe search engine results into my recon pipeline
- search multiple OSINT engines at once with one query

## When to choose
- you need to aggregate host discovery results from many search engines in one query
- you want a scriptable CLI that fits into automated recon pipelines
- you do bug bounty or attack surface management and need broad internet-wide search coverage

## When to avoid
- you need deep vulnerability scanning or exploitation rather than host discovery
- you have no API keys for any supported search engines
- you want a GUI-based OSINT platform instead of a command-line tool

## Facets
- artifact type: cli-tool
- maturity: active
- function: search-engine, osint, http-client, cli, developer-tools
- domain: security, osint, developer-tools
- platform: windows, cli, go
- tags: recon, attack-surface-management, bug-bounty, exposed-hosts, shodan, censys, fofa, reconnaissance, command-line, linux, macos

## Member repositories
- projectdiscovery/uncover (main) score 84

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:39.367972+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:29:13.964020+00:00, confidence not recorded.
  - readme: https://github.com/projectdiscovery/uncover (fetched 2026-08-28T04:07:39.367972+00:00, sha f12df3f16aeb)
- Data as of 2026-08-30T08:39:29.467469+00:00.