uncover

Free

The repository's SPDX field on 19 Oct 2026 was MIT, and the README did not print a price for uncover itself. The binary ran the shodan-idb engine with no key and no checkout. Shodan, Censys, FOFA, and the other named engines are separate services. The README says they need their own API keys. This listing did not open those accounts and does not copy a Shodan or Censys plan price onto uncover. MIT covers the client. It does not cover a third-party search engine's quota. If a key-backed engine later bills a query, cite that engine's pricing page. The twelve lines for 1.1.1.1 and the two lines for 8.8.8.8 are result counts from one morning. They are not a fee.

uncover, from projectdiscovery/uncover, is a Go client that asks internet search engines for hosts. The README says it requires go1.21 to install, and that the engine flag accepts shodan, shodan-idb, fofa, censys, and others, with shodan as the flag's default. The same README says shodan-idb does not require an API key and is the engine used by default when the input is an IP or a CIDR. The other engines need keys. They were not configured and were not queried. The latest GitHub release on 19 Oct 2026 was v1.2.1, published 2026-05-20T11:54:31Z. The binary's own line was Current Version: v1.2.1. The SPDX field is MIT.

• Client v1.2.1. The GitHub release v1.2.1 was published 2026-05-20. The binary printed Current Version: v1.2.1. The SPDX field is MIT.
• 1.1.1.1 returned twelve ports. shodan-idb listed 53, 80, 443, 2052, 2053, 2082, 2083, 2086, 2087, 2096, 8080, and 8443.
• 8.8.8.8 returned two. The same engine and the same morning returned 8.8.8.8:53 and 8.8.8.8:443.

1. 1

   Pass -e shodan-idb when you want the keyless engine, and name that engine next to the output.

2. 2

   Query an address you are willing to record, and keep the host:port lines with the date.

3. 3

   Open the upstream engine before you treat a port as currently open.

• You want the ports a public resolver presents to an internet search engine. On 19 Oct 2026 uncover v1.2.1 with -e shodan-idb printed twelve host:port lines for 1.1.1.1, including 53, 80, 443, 8080, and 8443, and two lines for 8.8.8.8, ports 53 and 443. The README says shodan-idb needs no key. The SPDX field is MIT. Name the engine next to the lines.
• A note is about to call this a scan of a network. The commands were echo of a single address piped to uncover. This machine did not connect to those ports, and the README's CIDR examples were not the commands that ran. A host:port line is the engine's association. Confirm it in Shodan's own record before you brief it as currently open.
• Another engine is about to be described as included. The flag help lists Shodan, Censys, FOFA, and others. Those need keys, and none of them was configured. The flag default in the help text is shodan, while the README says shodan-idb is the default for an IP. The commands passed -e shodan-idb so the sentence does not rest on the default.

Hard cases

The case where the first result is easy to over-read.

Questions

Titled sources. These public pages are what the quotes on this listing come from.