ZoomEye : the CyberSpace search engine you never heard of

Everyone knows about the beloved Shodan and the new valid alternative Censys for searching IoT devices, even general newspaper wrote articles about them, but are you sure you aren’t missing anything?

ZoomEye is a search engine for Cyberspace
In Chinese ancient legends, there’s a famous ghost buster named Zhong Kui. Just like him, ZoomEye is created for hunting the demons in Cyberspace.

ZoomEye is a search engine developed by Knownsec Inc, a Chinese security firm based in Beijing. The first version of ZoomEye was released on 1st July 2013 and it underwent continuos development until now reaching version 3.

ZoomEye uses Xmap and Wmap at its core for grabbing data from publicly exposed devices and web services and doing fingerprint analysis.


ZoomEye uses some keywords like every search engine and it’s very simple to use.

Search by application:

app: application name

ver: version number

Search by location:

country: country code (for example: UK, IT, ES, FR, CN, JP..)

city: name of city

You can combine multiple countries and cities in your queries, the filters act as a logical OR.

Search by port:

port: port number

You can combine multiple ports in your queries, the filters act as a logical OR.

Search by OS:

os: name of the operating system (for example os:linux)

Search by service:

service: service name

You can combine multiple services in your queries, the filters act as a logical OR. For a full list of services, see https://svn.nmap.org/nmap/nmap-services.

Search by hostname:

hostname: hostname (for example hostname:google.com)

You can combine multiple hostnames in your queries, the filters act as a logical OR.

Search by IP Address:

ip: ip address (for example ip:

You can combine multiple IPs in your queries, the filters act as a logical OR.

Search by CIDR:

cidr: cidr segment (for example cidr:

Registered users are limited to 5 searches/day for CIDR.

Search by site:

site: domain name (for example site:google.com)

Search by HTTP Headers:

headers: headers in HTTP request

Search by SEO keywords:

keywords: keywords defined inside <meta name=”Keywords”>

Search by description:

desc: description inside <meta name=”description”>

Search by title:

title: title inside <title>

For those interested in large scale queries, an API is available. See here for more information: https://www.zoomeye.org/help/api.


meterpreter zoomeye

meterpreter zoomeye


ZoomEye features a dedicated section for Industrial Control Systems and Supervisory Control And Data Acquisition systems. See here: http://ics.zoomeye.org.

ICS ZoomEye

ICS ZoomEye


Did you enjoy this article?
Signup today and receive free updates straight in your inbox. We will never share or sell your email address.
I agree to have my personal information transfered to MailChimp ( more information )

Author: Fabio Baroni   Date: 2016-01-13 16:07:25

Comments 5

    1. Post

      You can find a “user manual” in this article and you find the same information also on the official website. Maybe what you are looking for is a tutorial on what to do with ZoomEye and how to do it. Well, this is beyond the scope of this article. If you have some specific need you may write it here and I’ll try to help you.

    1. Post

Leave a Reply

Your email address will not be published.