9 tools
Code search engines index source code and the underlying markup of public websites and repositories, letting you query across billions of lines by keyword, function, technology or embedded string. Some focus on open-source repositories, while others crawl live sites to reveal the libraries, trackers and frameworks a page uses. For security researchers and OSINT analysts, they are invaluable for spotting exposed API keys, hardcoded credentials, reused code snippets and infrastructure fingerprints that tie sites together.
When choosing a tool, consider whether it targets repositories or live web source, how current its index is, and what query operators it supports for precise matching. Use these tools defensively and ethically: finding a leaked secret in someone else's code does not authorise you to use it, and responsible disclosure is the right response. Combine code search with domain and IP research to map an organisation's footprint, and browse the full OSINT directory for more.
Find Other Websites Owned By The Same Person
The ultimate search engine for finding GitHub repositories
Searches code from the entire github public repositories for a given specific string or using regular expression.
Search engine for source code.
Help find real world examples of functions, API's and libraries across 10+ sources.
Index thousands of repos on your machine and search through them in a fast, powerful, and modern web interface.
Search code from millions of open source repositories.
Code search engines let you query public source code and website markup for specific strings, functions, libraries or patterns. Analysts use them to find exposed API keys and credentials, identify which technologies a site runs, discover reused code across projects, and fingerprint infrastructure. They are widely used for vulnerability research, supply-chain analysis and competitive technology intelligence.
They search public repositories and web source for tell-tale patterns such as key prefixes, connection strings and token formats. Because developers sometimes commit secrets by mistake, targeted queries can surface exposed credentials quickly. Ethical researchers report findings to the owner through responsible disclosure rather than using the secret, and organisations scan their own code to catch leaks first.
Searching and reading publicly indexed code is legal and is a routine part of security research and development. The legal and ethical lines are crossed if you use exposed credentials, access systems without authorisation, or violate a repository's licence. Keep activity to observation and analysis, and disclose any sensitive exposures responsibly to the affected party.
Search all 1,200+ OSINT tools instantly, or run a target through the investigation console.
Open the OSINT directory →