A self-hosted network reconnaissance framework for building alternatives to Shodan, ZoomEye, Censys, and GreyNoise.
IVRE is a network reconnaissance framework that allows users to build self-hosted alternatives to commercial network intelligence platforms like Shodan and Censys. It aggregates data from both passive and active scanning tools to provide comprehensive network visibility and analysis. The framework supports various databases and includes a web interface for data exploration.
Security researchers, penetration testers, network administrators, and organizations needing private, customizable network reconnaissance capabilities.
IVRE offers complete data ownership and customization, enabling users to avoid reliance on external services while leveraging a wide array of reconnaissance tools. Its modular design and support for multiple backends make it adaptable to diverse security workflows.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
IVRE integrates data from diverse tools like Nmap, Zeek, and ProjectDiscovery scanners, enabling comprehensive network analysis from a single platform.
Supports multiple databases including MongoDB, Elasticsearch, PostgreSQL, SQLite, and TinyDB, allowing users to tailor storage to their infrastructure.
Provides a private alternative to commercial services like Shodan, emphasizing full data ownership and customization, as highlighted in its philosophy.
Offers both a web interface for visualization and CLI tools for automation, catering to varied reconnaissance workflows and user preferences.
Setting up IVRE requires configuring multiple components (e.g., databases, sensors) and integrating external tools, which can be time-consuming and error-prone.
Processing and storing large volumes of network data with supported databases demands significant memory, storage, and computational power.
Users must independently deploy and configure each supported tool (e.g., Zeek, Nmap), unlike all-in-one solutions that bundle everything out-of-the-box.
IVRE is an open-source alternative to the following products:
Censys is a cybersecurity platform that provides internet-wide scanning and data analysis to help organizations discover and monitor their digital assets and identify security risks.
Shodan is a search engine for internet-connected devices, allowing users to find specific types of computers, servers, IoT devices, and their vulnerabilities.
ZoomEye is a cyberspace search engine and network reconnaissance tool that allows users to discover and analyze internet-connected devices and services.