API archive entry · source-reported

Sonar

Project Sonar DNS Enumeration API

Provider / source website

From the publisher

README & documentation

Source preview

Read the project’s overview, installation instructions and usage examples. The original README is the source of truth.

Over a year ago Rapid7 revoked public access to their datasets, and thus the data hosted on the omnisint API became extremely out of date. In addition, due to the licensing changes around the data, our wonderful sponsor ZeroGuard was no longer able to support the project. As a result, it has been taken offline. However, I have released full instruction for running your own instance of the API, providing you can obtain a dataset. The instructions can be found at the bottom of the README. This repo contains all the tools needed to create a blazing fast API for Rapid7's Project Sonar dataset. It employs a custom indexing method in order to achieve fast lookups of both subdomains for a given domain, and domains which resolve to a given IP address. An instance of this API (Crobat) is online at the following URL: Crobat is a command line utility…

Cgboal/SonarSearch on GitHub A short preview, not the full document.

Read the full README ↗ · Preview checked 2026-10-27T18:32:35.046Z

Inside the original README — Document outline
  1. SonarSearch v2
  2. Attention!
  3. Crobat
  4. Crobat API
  5. Third-Party SDKs
  6. Contributing
  7. SonarSearch Setup Instructions
  8. Installation of tools
  9. Set up Postgres
  10. Acquiring the datasets
  11. Building the indexes
  12. Step 1

Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.

Links from the README

References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.

Documentation belongs to its respective authors. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.

Access at a glance

These are reported access facts. Check the current documentation before integrating.

  • Authentication: No auth.
  • HTTPS: reported by the source.
  • Browser access (CORS): Yes.

Pricing and limits

Current plans, quotas, and rate limits have not been reviewed for this listing. Check the provider’s current terms; no authentication does not necessarily mean free usage.

Documentation and sources

Imported from public-apis/public-apis. A detailed editorial review has not been published yet.

Provider / source reference

public-apis/public-apis · MIT directory metadata

More Development APIs

Hourora

Current time, DST-aware conversion, all IANA zones with clock changes, city and coordinate lookup

No auth · HTTPS reported · CORS Yes

Timezones

Time now, conversions and DST changes for every IANA time zone, no key needed

No auth · HTTPS reported · CORS Yes

Enterno

HTTP headers, DNS, SSL, WHOIS and redirect checks as plain text, JSON or CSV

No auth · HTTPS reported · CORS Yes

seodata

Keyword search volume, CPC and competition by country, no key needed

No auth · HTTPS reported · CORS Yes

Yumi Wheel Evidence

Intersect wheel tags for explicit PyPI releases with caller-supplied tags

No auth · HTTPS reported · CORS Yes

Codeberg

Git hosting, repos and issues via Gitea API

No auth · HTTPS reported · CORS Yes

Source reference

public-apis/public-apis

This page separates source-reported facts from questions that need live provider verification.