Enter a target
Accepted input: Domain, Email address, Username.
fleet module
Temporarily offline while GitHub access is being reconfigured. It cannot be selected or charged until it is back.Searches public GitHub code for leaked secrets and references to a domain or identifier. Results land in a Command One case with their source and confidence, alongside the rest of your investigation. Part of Subdomain finder · all tools.
public sources only · free registration
how it works
Accepted input: Domain, Email address, Username.
The job is sent to a live worker. If no worker can run it, you are not charged.
Public code matches that mention the selector.
Link findings in CommandDeck, add notes and export a PDF or CSV case report.
related modules
Combining modules gives independent sources that confirm or rule out a lead.
Quick passive look at a domain's DNS, mail setup and certificate surface.
Gathers emails, hostnames and subdomains for a domain from public sources.
Passive subdomain enumeration using search engines and public datasets.
Maps a domain's attack surface by discovering subdomains and related infrastructure.
Modular reconnaissance framework that gathers hosts and contacts for a domain.
Recursive attack-surface scanner that keeps expanding from each new discovery.
questions
Public code matches that mention the selector.
Domain, Email address, Username. Command One only runs a module against targets it accepts.
Matches can be test data or already revoked secrets; verify before reporting.
Registration is free. The module uses credits from your daily allowance or purchased balance. Current costs are listed on the credits page, and you are only charged when the module can actually run.
Create a free account to run available modules. For lawful research and authorised assessments only.