Shodan is described as 'Search engine that lets you find specific computers (routers, servers, etc.) using a variety of filters. Some have also described it as a public port scan directory or a search engine of banners' and is an app in the network & admin category. There are more than 25 alternatives to Shodan for a variety of platforms, including Web-based, Linux, Windows, Mac and SaaS apps. The best Shodan alternative is Criminal IP, which is free. Other great apps like Shodan are ZoomEye, Censys, IVRE and FOFA.
Criminal IP protects IT assets and businesses by analyzing all years of cyber threats and prediciting exploits. Criminal IP provides real-time intelligence to enhance cybersecurity competencies in all aspects.
Criminal IP has the benefit of being in Beta. They're completely free to use.
the free service is appealing
never imagined i could one day find myself a hacked website... cheers to the team!
the best shodan alternative
Censys is a search engine that allows computer scientists to ask questions about the devices and networks that compose the internet.
no limit on number of searches, lots of filters
Fresher data, more ports scanned
Great for indexing local networks and such
Because it's an open-source framework for scanning, indexing and researching data about connected device... Like Shodan.
Because it's completely free and open-source and works exactly like Shodan.
Intruder is a security monitoring platform for internet-facing systems.
Intruder provides an easy to use security solution which continually scans your digital assets, highlighting vulnerabilities and outlining remediation advice in simple terms.
ONYPHE is a search engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise.
Reposify is an attack surface management platform delivering autonomous, 24/7 discovery of internet exposed assets across all environments and the supply chain.
Learn about our vulnerability management software, Nexpose. See how our vulnerability scanner prioritizes vulnerabilities and speeds up remediation.
Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.
Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies.
LeakIX is a search engine indexing open hosts on the internet. It focuses on listing the databases and table names and keeps a history of every successful connection.
Has less data but is free for all. Also table names (mysql), collection names (mongo), index names ( elasticsearch ) and topic ( kafka ) names are searchable.
Simple, too the point indexer with nice querying capacities
South Korea
China
United States
France
EU
United Kingdom
If you are looking for a free search engine, Criminal IP should be your choice. I mean, it's currently in beta stage and free so why not?