FOFA

FOFA is a leading Chinese cyberspace search engine that indexes internet-connected devices with over 350,000 fingerprint rules and 4 billion assets.

Internet Intelligence Asset Discovery Network Mapping Threat Intelligence

Overview

FOFA is a comprehensive cyberspace search engine developed by Beijing Huashun Xin'an Technology that provides detailed intelligence on internet-connected devices and services. It indexes over 4 billion assets with 350,000+ fingerprint rules, offering extensive coverage of the global internet landscape. FOFA is widely used by security researchers, penetration testers, and government agencies for asset discovery, vulnerability identification, and threat intelligence gathering. Known for its powerful query language and strong focus on mapping Chinese internet infrastructure.

Primary Use Cases

✔ Discovering internet-connected assets and devices for attack surface management.

✔ Identifying vulnerabilities in internet-facing devices and services.

✔ Conducting threat intelligence gathering and security research.

Frequently Asked Questions

FOFA is a leading Chinese cyberspace search engine developed by Beijing Huashun Xin'an Technology. It indexes internet-connected devices and services with over 350,000 fingerprint rules and 4 billion assets, making it a powerful tool for cybersecurity research.

FOFA offers both free and paid plans. The free tier provides limited search capabilities. Paid plans offer comprehensive features including advanced search queries, bulk data exports, and API access for enterprise users.

FOFA is known for its extensive coverage of Chinese internet infrastructure with over 350,000 fingerprint rules. It offers a powerful query language and strong focus on mapping assets in the Asia-Pacific region, making it particularly valuable for researchers investigating Chinese internet landscape.

Yes, FOFA provides a comprehensive API for programmatic access to its data. The API supports asset search, fingerprint retrieval, and vulnerability data querying, enabling integration with security tools and automated workflows.

FOFA supports security research by providing asset discovery for identifying internet-facing infrastructure, vulnerability detection through fingerprinting, threat intelligence gathering by monitoring exposures, and mapping of network relationships. It is particularly valuable for researchers investigating Chinese internet landscape.