uncover CLI
uncover is a network-asset search CLI that queries external indexes; discovered hosts still need separate availability checks.
- 3,105 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- The CLI sends queries to external APIs and consumes configured account quotas.
Install
In your terminal, with SkillFoxx CLI
npx skillfoxx add cli/uncoverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The CLI sends queries to external APIs and consumes configured account quotas.
This is third-party code. Review the repository files before installing.
What it does
uncover is a CLI that combines queries to internet-asset search engines such as Shodan and Censys. Users select queries and providers and receive matching hosts in one stream, including queries supplied by file or standard input. Provider filters and data coverage still determine results. Output supports inventorying owned infrastructure; live availability or security verification is a separate step.
Who it is for. Infrastructure inventory specialists comparing external records of owned hosts across services.
Good fit when
- A team compares organization-domain records across several search databases.
- For repeated assessments, you save queries in a file and run the same set.
- A report uses addresses with a selected set of output fields.
- Before active assessment, an analyst gathers candidates from external indexes.
Not a fit when
- A search record must serve as proof of a current vulnerability.
- You lack permission for the planned active checks of discovered systems.
- You expect identical query filters across all providers.
Example request
Prepare queries for our domains across two providers and collect addresses without actively scanning the hosts.Limitations
Source installation requires Go 1.21; verify the installed Go version in the terminal you will use to build the CLI. Query syntax follows the selected engine’s filters rather than a universal language. Results default to a limit of 100, so assess coverage alongside provider API limits. External indexes can lag a host’s current state; confirm findings through a separate authorized check before drawing conclusions.
How to disable. Stop queries and uninstall the binary. Remove or revoke provider credentials separately.
FAQ
Are API keys required?
Usually yes. shodan-idb is a keyless exception; check the selected provider.
Where is provider configuration?
By default at `$CONFIG/uncover/provider-config.yaml`; keep credentials out of chat and reports.
Why did output stop at 100 hosts?
That is the default limit. `-limit` changes it while provider restrictions still apply.
Can I rate-limit requests?
Yes. `-rate-limit` caps requests per second; `-rate-limit-minute` sets a per-minute limit. Choose values within the provider API access limits.
What happens with an IP or CIDR input?
shodan-idb is the default engine. Check that source before comparing other services.
Discussion
No questions or reviews yet.
Related
CLI toolshttpx is a ProjectDiscovery CLI that reports on a list of web endpoints using selected fields and a configured request rate.
BBOT is an external-infrastructure CLI scanner whose findings feed tables or graphs through JSON, CSV and Neo4j output.
An OSINT AI agent with an interactive mode, an MCP server and a CLI: about twenty tools to check domains, addresses, hashes and breaches
The CLI collects hostnames and IP addresses from cloud accounts so agents can prepare a consolidated asset inventory.
The CLI searches public profiles by username so agents can gather links for a person’s or brand’s online presence review.
Katana is a CLI crawler that saves form and request details as JSONL so crawl results can be processed by other tools.
README in short
Output fields are selectable. IP or CIDR input defaults to shodan-idb, a source that works without an API key.