uncover

Operator: ProjectDiscovery

Locally installable tool for host searches across multiple internet search services. Returns IP addresses, ports and hostnames.

Technical Infrastructure

Open website (external website)

Product

Free open-source command-line tool and Go library for querying external internet search services together.

Availability and source date

Active

As of: 16 October 2026.

No functionality test has been performed.

Use in OSINT research

Collects exposed hosts matching search terms from services such as Shodan, Censys and FOFA. Combines the results for further technical research.

Queries

InputResultResult type
Keyword / free textIP addresses, ports or hostnames from the selected search services. Input must use each service's search syntax.
Retrieved
IP addressFor an IP address or IP range: open ports recorded there, from Shodan InternetDB by default.
Retrieved

Features

  • Queries multiple internet search services in a single run.
  • Supports general and provider-specific search queries.
  • Reads search queries from files or standard input.
  • Outputs IP addresses, ports and hostnames as text or JSONL.
  • Can save raw responses from the providers used.

Categories

  • Technical Infrastructure
  • Internet scanning

Coverage

Dataset

Datasets from external search services such as Shodan, Censys, FOFA and Netlas. No internet dataset of its own.

Access

Installation and deployment

Locally installable

Local command-line program and Go library. The README describes installation, provider configuration and integration into your own processing pipelines. No hosted search service of its own.

Requirements

Local installation with Go. Most search services require their API keys. Shodan InternetDB works without a key.

Export

Text file, standard output, JSONL and raw responses from provider APIs.

Provider

ProjectDiscovery

Country of establishment

Unknown

Interfaces

No API, MCP or AI integration is documented.

Maintenance

Licence

MIT

Latest activity

Commit 08/2026

Stars

approx. 3,100 (as of 16 October 2026)

Limitations

  • Search syntax and available filters depend on the selected service.
  • Results and allowances depend on its dataset and plan; by default, no more than 100 results are requested.
  • uncover retrieves existing provider data. It does not itself check whether the discovered hosts are currently reachable.

Guides and practical reports

Sources

Report an error