How do I install the Uncover Search skill?

Run npx skillmds@latest add aibot88/uncover-search in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Uncover Search safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Uncover Search?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Uncover Search free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Uncover Search?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Uncover Search by aibot88 — Agent Skill

Name: Uncover Search
Rating: 4.5 (4 reviews)
Author: aibot88

Uncover Search

使用 uncover 聚合查询网络空间搜索引擎。当需要从 Shodan/Censys/FOFA/Hunter/Quake/ZoomEye 等引擎快速发现暴露资产时使用。uncover 统一了多个搜索引擎的查询接口，一条命令查询多个引擎。任何涉及资产发现、互联网测绘、暴露面排查的场景都应使用此技能

aibot88 Updated Sep 9, 2026 3 repo stars

File contents

uncover 网络空间搜索引擎聚合方法论

uncover 是 ProjectDiscovery 出品的搜索引擎聚合工具。核心优势：多引擎统一接口（Shodan/Censys/FOFA/Hunter/Quake/ZoomEye/Netlas）+ 一条命令查多源 + 管道友好。

项目地址：https://github.com/projectdiscovery/uncover

API Key 配置：编辑 ~/.config/uncover/provider-config.yaml 添加各引擎 API Key。

Phase 1: 基本搜索

# Shodan 搜索
uncover -q "org:target.com" -e shodan

# FOFA 搜索
uncover -q 'domain="target.com"' -e fofa

# Censys 搜索
uncover -q "target.com" -e censys

# 多引擎同时查询
uncover -q "target.com" -e shodan,censys,fofa

Phase 2: 高级搜索

# 限制结果数量
uncover -q "apache" -e shodan -l 200

# JSON 输出
uncover -q "org:target.com" -e shodan -json -o results.json

# 静默输出（只显示 IP:Port）
uncover -q "org:target.com" -e shodan -silent

# 从文件读取查询
uncover -ql queries.txt -e shodan

Phase 3: 管道集成

# 资产发现 → HTTP 探活
uncover -q "org:target.com" -e shodan -silent | httpx -silent

# 资产发现 → 端口扫描
uncover -q "org:target.com" -e shodan -silent | naabu -silent

# 资产发现 → 漏洞扫描
uncover -q 'domain="target.com"' -e fofa -silent | httpx -silent | nuclei

各引擎查询语法

引擎	域名查询	组织查询
Shodan	`hostname:target.com`	`org:"Target Inc"`
Censys	`target.com`	`autonomous_system.name:"Target"`
FOFA	`domain="target.com"`	`org="Target Inc"`
Hunter	`domain="target.com"`	`icp.name="Target"`
Quake	`domain:"target.com"`	`org:"Target Inc"`

---name: uncover-searchdescription: 使用 uncover 聚合查询网络空间搜索引擎。当需要从 Shodan/Censys/FOFA/Hunter/Quake/ZoomEye 等引擎快速发现暴露资产时使用。uncover 统一了多个搜索引擎的查询接口，一条命令查询多个引擎。任何涉及资产发现、互联网测绘、暴露面排查的场景都应使用此技能--- # uncover 网络空间搜索引擎聚合方法论 uncover 是 ProjectDiscovery 出品的搜索引擎聚合工具。核心优势：**多引擎统一接口**（Shodan/Censys/FOFA/Hunter/Quake/ZoomEye/Netlas）+ **一条命令查多源** + **管道友好**。项目地址：https://github.com/projectdiscovery/uncover API Key 配置：编辑 `~/.config/uncover/provider-config.yaml` 添加各引擎 API Key。 ## Phase 1: 基本搜索 ```bash # Shodan 搜索 uncover -q "org:target.com" -e shodan # FOFA 搜索 uncover -q 'domain="target.com"' -e fofa # Censys 搜索 uncover -q "target.com" -e censys # 多引擎同时查询 uncover -q "target.com" -e shodan,censys,fofa ``` ## Phase 2: 高级搜索 ```bash # 限制结果数量 uncover -q "apache" -e shodan -l 200 # JSON 输出 uncover -q "org:target.com" -e shodan -json -o results.json # 静默输出（只显示 IP:Port） uncover -q "org:target.com" -e shodan -silent # 从文件读取查询 uncover -ql queries.txt -e shodan ``` ## Phase 3: 管道集成 ```bash # 资产发现 → HTTP 探活 uncover -q "org:target.com" -e shodan -silent | httpx -silent # 资产发现 → 端口扫描 uncover -q "org:target.com" -e shodan -silent | naabu -silent # 资产发现 → 漏洞扫描 uncover -q 'domain="target.com"' -e fofa -silent | httpx -silent | nuclei ``` ## 各引擎查询语法 | 引擎 | 域名查询 | 组织查询 | |------|---------|---------| | Shodan | `hostname:target.com` | `org:"Target Inc"` | | Censys | `target.com` | `autonomous_system.name:"Target"` | | FOFA | `domain="target.com"` | `org="Target Inc"` | | Hunter | `domain="target.com"` | `icp.name="Target"` | | Quake | `domain:"target.com"` | `org:"Target Inc"` |

Frequently asked questions