Automic VaultAutomic Vault

brew

使用 Homebrew, Nix 安装 uncover

查看 uncover 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install uncover

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#uncover

nixpkgs package indexes · pkgs/by-name/un/uncover/package.nix · 来源: api.github.com

概览

软件包摘要

Tool to discover exposed hosts on the internet using multiple search engines

命令和别名

  • uncover

历史

项目历史与用法

uncover is a ProjectDiscovery reconnaissance CLI that queries public internet search engines to discover exposed hosts. Its history is recent, but it fits a well-defined package-nerd niche: small Go security tools that compose through stdin/stdout and API-key-backed provider configuration.

项目历史

ProjectDiscovery's official docs describe uncover as a Go wrapper using APIs from well-known search engines to quickly discover exposed hosts on the internet. The GitHub repository was created in 2022, and its first public tag/release series began with 0.0.1 in March 2022.

The official ProjectDiscovery blog frames uncover as a CLI for simplifying Shodan, Censys, ZoomEye, FOFA, and related internet-search workflows, especially inside automation pipelines. Later releases expanded provider support and added features such as multiple API keys and output customization.

采用历史

uncover belongs to the broader ProjectDiscovery ecosystem of security automation tools. Official ProjectDiscovery documentation emphasizes CLI and Cloud workflows for asset discovery and vulnerability management, and the project's llms.txt lists uncover among the major open-source tools.

The input package metadata shows package-manager availability in Homebrew and Nix. In practice, uncover's adoption is strongest among security engineers, bug-bounty hunters, and recon automation users who already chain tools such as httpx, nuclei, subfinder, and naabu.

使用方式

The docs describe querying multiple search engines at once, using provider API keys, randomizing across multiple keys, and integrating results with existing pipeline tools. The README documents `go install` installation and flags for query input, engine selection, and awesome-search-queries support.

Package-manager users install uncover to avoid maintaining a separate Go build checkout and to keep the binary updated alongside the rest of a recon toolkit. The important operational state is the provider configuration file that stores search-engine API keys.

为什么软件包爱好者会关心

uncover is significant in the security package niche because it normalizes many proprietary search APIs behind one CLI. That makes it easy to slot into shell pipelines, CI-style reconnaissance jobs, and ProjectDiscovery-style workflows.

It is young compared with classic Unix tools, but its value is exactly the modern package-manager value proposition: one small binary, fast updates, many upstream integrations, and predictable config paths.

时间线

  • 2022: GitHub repository created and 0.0.1 release published.
  • 2022: ProjectDiscovery blog introduces uncover as a CLI for discovering exposed hosts and vulnerable instances.
  • 2022: v1.0.0 release published.
  • 2025: v1.0.10 adds new search-query and provider support.
  • 2026: v1.2.1 release published.

Related projects

  • ProjectDiscovery tools such as nuclei, httpx, subfinder, naabu, dnsx, and cloudlist are adjacent tools in the same security automation ecosystem.
  • Supported search/provider ecosystems include Shodan, Censys, FOFA, Hunter, Quake, ZoomEye, Netlas, CriminalIP, PublicWWW, HunterHow, Google, Onyphe, Driftnet, DayDayMap, and NerdyData as documented by official sources.

安全态势

尚未找到受保护工具覆盖

没有找到 uncover 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布,以便未来覆盖拥有稳定的软件包 URL。

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.config/uncover/config.yaml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.config/uncover/provider-config.yaml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
uncovercli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-25
管理器版本1.2.1
管理器更新时间2026-05-20
本地数据OK
上游当前
检测到的最新版本v1.2.1

https://github.com/projectdiscovery/uncover

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:uncover
版本1.2.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/uncover
主页https://github.com/projectdiscovery/uncover
仓库https://github.com/projectdiscovery/uncover
上游文档https://docs.projectdiscovery.io/opensource/uncover/overview
许可证MIT
源码归档https://github.com/projectdiscovery/uncover/archive/refs/tags/v1.2.1.tar.gz
最后更新2026-05-20T15:38:03Z
Pulseupdated
构建依赖go
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameuncover
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

uncover

nix profile install nixpkgs#uncover
  • normalized package name match
  • 匹配方式:Uncover
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/un/uncover/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment