search-viewer整合Fofa、Hunter、Shodan等空间测绘平台API,辅助渗透测试信息收集和资产发现的工具。
Install via ClawdBot CLI:
clawdbot install adminlove520/search-viewerGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
post → https://quake.360.net/api/v3/search/quake_servicePotentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://github.com/adminlove520/Search_Viewer.gitAudited Apr 17, 2026 · audit v1.0
Generated Mar 22, 2026
Penetration testers use this skill to identify and enumerate target assets during reconnaissance phases. It aggregates data from multiple platforms like Fofa and Zoomeye to find subdomains, open ports, and exposed services, helping to map the attack surface efficiently.
Security researchers leverage the skill to discover vulnerable assets exposed online, such as misconfigured databases or weak services. By querying platforms like Shodan and 360 Quake, they can analyze trends and assess global distributions of specific technologies for proactive defense.
During security incidents, teams use this tool to quickly locate affected assets across networks. It enables rapid scanning of platforms like Hunter and Zoomeye to identify compromised systems or unauthorized exposures, aiding in containment and remediation efforts.
Organizations employ the skill to audit their external digital footprint and ensure compliance with security policies. It helps identify unintentionally exposed assets, such as open FTP servers or outdated services, allowing for risk mitigation and regulatory adherence.
The skill relies on platforms like Fofa and Shodan that offer free tiers with limited queries, encouraging users to upgrade to paid subscriptions for higher limits and advanced features. Revenue is generated through API key sales and premium account upgrades.
Companies can integrate this skill into larger security suites or platforms, offering it as a value-added feature for reconnaissance. Revenue comes from licensing fees, custom development, and support services tailored to enterprise clients.
Educational providers use the skill in cybersecurity training courses to teach reconnaissance techniques. Revenue is generated through course fees, certification exams, and workshops focused on practical skills like asset discovery and penetration testing.
💬 Integration Tip
Ensure API keys are securely stored and rotated regularly to comply with platform terms and avoid service disruptions. Integrate with existing security workflows for automated asset monitoring.
Scored Apr 19, 2026
Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).
AI-optimized web search via Tavily API. Returns concise, relevant results for AI agents.
Multi search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...
Web search via Tavily API (alternative to Brave). Use when the user asks to search the web / look up sources / find links and Brave web_search is unavailable...
Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.