fofax

Run `npx skills add xiecat/fofax --all -g -y` in your terminal to install all tools in this suite globally.

Fofax is a command-line client for the FOFA search engine that finds internet-exposed assets like servers, domains, and services. It also calculates icon hashes and certificates and pipes results into other security tools.

The built-in fofa-query-syntax skill generates and checks FOFA statements for you, enforcing correct fields, operators, and value formats. It returns a main query plus equivalent rewrites with explanations.

Yes. It ships a SKILL.md skill for FOFA syntax and a local MCP server, so agents in Cursor or Claude Desktop can run structured FOFA searches directly.

Yes. You add your FOFA API key to the auto-generated fofax.yaml config file, and some advanced fields require a paid FOFA plan.