nowfound

Growth · July 5, 2026

Osint tool that finds exposed files on domains

hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

Osint tool that finds exposed files on domains launched on July 5, 2026 with 58 votes, #595 of 24,623 launches that month and more than 95% of that year's launches.

In plain words

This tool monitors certificate transparency logs to identify newly registered domains and automatically scans them for exposed files such as .env files, open Git directories, configuration files, and database dumps. Designed for penetration testers and bug bounty hunters, it stores findings in a searchable database accessible by domain or partial domain name. The service is read-only and free to use, allowing security researchers to quickly discover exposed sensitive information across the internet.

written from the facts on this page · September 2026

From the sources

Search observed domains for exposed paths and misconfigurations. Substring search over the domain, case-insensitive, at least 3 characters. E.g. staging. , .org , test- . These records are automatically deleted after at most 180 days. To request deletion of data relating to you, contact us via the imprint on the main site: cerast-intelligence.com/impressum . Running searches from a script or tool? You don't have to pass the human check — request an API key and skip it entirely. Email [email protected] and tell us who you are and what you'll use it for. We'll send you a key. It's free — we just like to know who's using the data. Keyed requests skip the challenge and get a higher rate limit.…from search.cerast-intelligence.com

In the maker’s words, at launch

hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts…

Does a similar job

all alternatives →
  • OSINT-Tool2023 · osint-tool.com · ▲117

    The only OSINT tool you will ever need

  • I built an OSINT tools directory2025 · r00m101.com · ▲53

    I work on R00M 101, a Reddit-based OSINT profiler. While building it, I realized most open-source intelligence (OSINT) tools are scattered across GitHub, outdated blog posts, or random Discords. So I put together a public-facing directory of 100+ OSINT tools used by analysts, journalists, and security folks, free, filterable, and categorized by risk, platform, and use case. The idea was to make something useful and no-friction. Built with static HTML + SQL backend + a lot of caffeine. Would love feedback on how to improve the UX or tool curation. If anyone wants to contribute tools or help…

  • Domain DossierAug 2026 · github.com · ▲2

    Free OSINT tool for investigating domains.

  • OSINT Tools Directory2024 · osint.broker · ▲11

    Free & premium OSINT tools collection

  • Certificate Transparency Log Monitor2016 · sslmate.com · ▲53
  • OSINT Tool2021 · osint-tool.com · ▲109

    Chrome extension looks up phone/email/IP/people via APIs

Questions this answers

More growth this month

the category →
  • wallhop is a free paywall bypass. Paste any article link to read it without paywall popups, ads or clutter. No signup, no extension. A simple 12ft.io alternative.

    Growth · 13d ago · wallhop.io

  • Prefer▲201

    The execution layer for AEO

    Growth · 24d ago · tryprefer.com

  • MakerMap▲197

    A living map of makers and what they’re building

    Growth · 28d ago · makermap.lol

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, July 2026

the whole month →
  • IR

    I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…

    Life & fun · Jul 2026

  • Elevators▲1,680

    How elevators push your buttons

    Life & fun · Jul 2026 · john.fun

  • 18 Words▲1,160

    Play 18 Words, the free daily word puzzle. The official home is 18words.com. Tap Play now to open today

    Life & fun · Jul 2026 · 18words.com

  • BA

    Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…

    Dev tools · Jul 2026 · bento.page

  • A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…

    AI · Jul 2026 · github.com

  • OpenSEO▲928

    Hello! For the last 2 months, I've been building OpenSEO. It's a user friendly UI wrapping the DataForSEO API which has high quality SEO data for keywords, backlinks, AI SEO and competitor research. Instead of paying $100+ per month, you buy DataForSEO credits and pay only for usage. The coolest thing about the project so far has been hearing about what people are building on top of it. People are using coding agents to quickly integrate with Google Search Console, Google Ads and building their own AI SEO and reporting features. Many were already building their own custom solutions around…

    Dev tools · Jul 2026 · openseo.so