uncover-search

uncover cyberspace search engine aggregation methodology

uncover is a search engine aggregation tool by ProjectDiscovery. Core advantages:Unified interface across multiple engines（Shodan/Censys/FOFA/Hunter/Quake/ZoomEye/Netlas）+ Query multiple sources with one command + Pipeline-friendly。

Project address:https://github.com/projectdiscovery/uncover

API Key configuration: edit ~/.config/uncover/provider-config.yaml to add API Keys for each engine.

Phase 1: Basic search

# Shodan 搜索
uncover -q "org:target.com" -e shodan

# FOFA 搜索
uncover -q 'domain="target.com"' -e fofa

# Censys 搜索
uncover -q "target.com" -e censys

Query multiple engines simultaneously

uncover -q "target.com" -e shodan,censys,fofa

## Phase 2: 高级搜索

```bash
# 限制结果数量
uncover -q "apache" -e shodan -l 200

# JSON 输出
uncover -q "org:target.com" -e shodan -json -o results.json

# 静默输出（只显示 IP:Port）
uncover -q "org:target.com" -e shodan -silent

# 从文件读取查询
uncover -ql queries.txt -e shodan

Phase 3: Pipeline integration

# 资产发现 → HTTP 探活
uncover -q "org:target.com" -e shodan -silent | httpx -silent

# 资产发现 → 端口扫描
uncover -q "org:target.com" -e shodan -silent | naabu -silent

# 资产发现 → 漏洞扫描
uncover -q 'domain="target.com"' -e fofa -silent | httpx -silent | nuclei

Query syntax for each engine

Engine	Domain query	Organization query
Shodan	hostname:target.com	org:"Target Inc"
Censys	target.com	autonomous_system.name:"Target"
FOFA	domain="target.com"	org="Target Inc"
Hunter	domain="target.com"	icp.name="Target"
Quake	domain:"target.com"	org:"Target Inc"