ZoomEye

https://www.zoomeye.ai/help
Admin
ZoomEye is an advanced cyberspace search engine that maps global internet-connected devices and...
Tokens:15,215
Snippets:154
Trust Score:8.5
Update:5 months ago
Show doc for...
Tokens:
Raw
### ZoomEye-python SDK Example

Source: https://www.zoomeye.ai/help/api-usage

Example of how to use the ZoomEye-python SDK to perform a search using an API key.

```APIDOC
## ZoomEye-python SDK Example

### Description
This snippet demonstrates how to initialize the ZoomEye SDK with an API key and perform a basic search query.

### Language
Python

### Code
```python
import zoomeyeai.sdk as zoomeye

# Use API-KEY search
zm = zoomeye.ZoomEye(api_key="01234567-acbd-00000-1111-22222222222")
data = zm.search('country=cn')

# The output will be a table-like structure with columns such as:
# ip                            port                       domain                      update_time
# 192.53.120.134                7766                       [unknown]                   2024-12-06T15:20:08
#   ...
```
```

--------------------------------

### Perform a Search Query with ZoomEye SDK

Source: https://www.zoomeye.ai/help/api-usage

Execute a search query using the initialized ZoomEye client. The example searches for devices in China.

```python
data = zm.search('country=cn')
```

--------------------------------

### Get User Information

Source: https://www.zoomeye.ai/help

Retrieves user information, including subscription details and current points.

```APIDOC
## Get User Information

### Description
Get user information, subscription details and current points.

### Method
POST

### Endpoint
/v2/userinfo
```

--------------------------------

### Get User Information with API Key

Source: https://www.zoomeye.ai/help

Use this endpoint to retrieve your ZoomEye account information. Ensure you replace `$YOUR_API_KEY` with your actual API key.

```bash
# Bash
curl -X POST https://api.zoomeye.ai/v2/userinfo -H "API-KEY: $YOUR_API_KEY"

```

--------------------------------

### Asset Search

Source: https://www.zoomeye.ai/help

Get network asset information based on query conditions.

```APIDOC
## POST /v2/search

### Description
Get network asset information based on query conditions.

### Method
POST

### Endpoint
https://api.zoomeye.ai/v2/search

### Parameters
#### Query Parameters
- **qbase64** (string) - Required - Base64 encoded query string. For more, refer to **Related references**.
- **fields** (string) - Optional - The fields to return, separated by commas. Default: ip, port, domain, update_time. For more, refer to **Response field description**.
- **sub_type** (string) - Optional - Data type, supports v4, v6, and web. Default is v4.
- **page** (integer) - Optional - View asset page number.
- **pagesize** (integer) - Optional - Number of records per page, default is 10, maximum is 10,000.
- **facets** (string) - Optional - Statistical items, separated by commas if there are multiple. Supports country, subdivisions, city, product, service, device, OS, and port.
- **ignore_cache** (boolean) - Optional - Whether to ignore the cache. false, supported by Business plan and above.

### Request Example
```bash
curl -X POST 'https://api.zoomeye.ai/v2/search' -H "API-KEY: $YOUR_API_KEY" \
-H 'content-type: application/json' \
-d '{ \
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK", \
  "page": 1 \
}'
```

### Response
#### Success Response (200)
- **code** (integer) - Response code
- **message** (string) - Response message
- **total** (integer) - Total number of results
- **query** (string) - The executed query
- **data** (array) - Array of asset information objects
  - **url** (string) - URL of the asset
  - **ssl.jarm** (string) - SSL JARM hash
  - **ssl.ja3s** (string) - SSL JA3s hash
  - **iconhash_md5** (string) - MD5 hash of the icon
  - **robots_md5** (string) - MD5 hash of the robots.txt file
  - **security_md5** (string) - MD5 hash of the security information
  - **ip** (string) - IP address of the asset
  - **domain** (string) - Domain name of the asset
  - **hostname** (string) - Hostname of the asset
  - **os** (string) - Operating system of the asset
  - **port** (integer) - Port number
  - **service** (string) - Service running on the port
  - **title** (array) - Titles found on the asset
  - **version** (string) - Version of the service or software
  - **device** (string) - Device type
  - **rdns** (string) - Reverse DNS entry
  - **product** (string) - Product name
  - **header** (string) - HTTP headers
  - **header_hash** (string) - MD5 hash of the HTTP headers
  - **body** (string) - HTTP response body
  - **body_hash** (string) - MD5 hash of the HTTP response body
  - **banner** (string) - Service banner information
  - **update_time** (string) - Timestamp of the last update
  - **header.server.name** (string) - Server name from headers
  - **header.server.version** (string) - Server version from headers
  - **continent.name** (string) - Continent name
  - **country.name** (string) - Country name
  - **province.name** (string) - Province/State name
  - **city.name** (string) - City name
  - **lon** (string) - Longitude
  - **lat** (string) - Latitude
  - **isp.name** (string) - ISP name
  - **organization.name** (string) - Organization name
  - **zipcode** (string) - Zip code
  - **idc** (integer) - IDC information
  - **honeypot** (integer) - Indicates if the asset is a honeypot
  - **asn** (integer) - Autonomous System Number
  - **protocol** (string) - Network protocol used
  - **ssl** (string) - SSL certificate details
  - **primary_industry** (string) - Primary industry of the organization
  - **sub_industry** (string) - Sub-industry of the organization
  - **rank** (integer) - Rank of the asset or organization

#### Response Example
```json
{
  "code": 60000,
  "message": "success",
  "total": 163139107,
  "query": "title=\"cisco vpn\"",
  "data": [
    {
      "url": "https://1.1.1.1:443",
      "ssl.jarm": "29d29d15d29d29d00029d29d29d29dea0f89a2e5fb09e4d8e099befed92cfa",
      "ssl.ja3s": "45094d08156d110d8ee97b204143db14",
      "iconhash_md5": "f3418a443e7d841097c714d69ec4bcb8",
      "robots_md5": "0b5ce08db7fb8fffe4e14d05588d49d9",
      "security_md5": "0b5ce08db7fb8fffe4e14d05588d49d9",
      "ip": "1.1.1.1",
      "domain": "www.google.com",
      "hostname": "SPACEX",
      "os": "windows",
      "port": 443,
      "service": "https",
      "title": [
        "GoogleGoogle appsGoogle Search"
      ],
      "version": "1.1.0",
      "device": "webcam",
      "rdns": "c01031-001.cust.wallcloud.ch",
      "product": "OpenSSD",
      "header": "HTTP/1.1 302 Found Location: https://www.google.com/?gws_rd=ssl Cache-Control: private...",
      "header_hash": "27f9973fe57298c3b63919259877a84d",
      "body": "HTTP/1.1 302 Found Location: https://www.google.com/?gws_rd=ssl Cache-Control: private...",
      "body_hash": "84a18166fde3ee7e7c974b8d1e7e21b4",
      "banner": "SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3",
      "update_time": "2024-07-03T14:34:10",
      "header.server.name": "nginx",
      "header.server.version": "1.8.1",
      "continent.name": "Europe",
      "country.name": "Germany",
      "province.name": "Hesse",
      "city.name": "Frankfurt",
      "lon": "118.753262",
      "lat": "32.064838",
      "isp.name": "aviel.ru",
      "organization.name": "SERVISFIRST BANK",
      "zipcode": "210003",
      "idc": 0,
      "honeypot": 0,
      "asn": 4837,
      "protocol": "tcp",
      "ssl": "SSL Certificate Version: TLS 1.2 CipherSuit: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256...",
      "primary_industry": "Finance",
      "sub_industry": "bank",
      "rank": 60
    }
  ]
}
```
```

--------------------------------

### Vulnerability Search

Source: https://www.zoomeye.ai/help

Get vulnerability information based on query parameters.

```APIDOC
## GET /v2/search/vuldb

### Description
Get vulnerability information based on query parameters.

### Method
GET

### Endpoint
/v2/search/vuldb

### Parameters
#### Query Parameters
- **page_size** (integer) - Optional - Number of items per page, default is 10, maximum is 100
- **page** (integer) - Optional - Page number
- **vendor** (string) - Optional - Filter statistics by vendor name
- **product** (string) - Optional - Filter statistics by product name

### Request Example
```
# Bash
curl -X GET 'https://api.zoomeye.ai/v2/search/vuldb?search=tongda' -H "API-KEY: $YOUR_API_KEY"
```

### Response
#### Success Response (200)
- **code** (integer) - Response code
- **message** (string) - Response message
- **data** (object) - Vulnerability details
  - **id** (string) - Unique identifier of the vulnerability
  - **title** (string) - Title of the vulnerability
  - **description** (string) - Detailed description of the vulnerability
  - **affected** (array) - Affected products information
    - **vendor** (string) - Vendor name
    - **product** (string) - Product name
    - **version** (string) - Affected version
  - **references** (array) - Reference links
    - **url** (string) - Reference URL
    - **name** (string) - Reference name
    - **tags** (array) - Reference tags
  - **severity** (object) - Severity information
    - **value** (string) - Severity level (low, medium, high, critical)
    - **source** (string) - Source of severity assessment
    - **score** (number) - Numerical severity score
  - **recommendation** (array) - Remediation recommendations
    - **type** (string) - Type of recommendation (official, temp)
    - **content** (string) - Recommendation content
  - **cwe** (array) - Common Weakness Enumeration information
    - **cwe_id** (string) - CWE identifier
    - **description** (string) - CWE description
  - **cvss** (array) - Common Vulnerability Scoring System information
    - **version** (string) - CVSS version
    - **score** (number) - CVSS score
    - **vector_string** (string) - CVSS vector string
    - **severity** (string) - CVSS severity level
  - **cpes** (array) - Common Platform Enumeration identifiers
  - **cnvd** (string) - China National Vulnerability Database identifier
  - **epss** (object) - Exploit Prediction Scoring System information
    - **cve_id** (string) - CVE identifier
    - **epss** (number) - EPSS score
    - **percentile** (number) - EPSS percentile
  - **updated_at** (string) - Last update timestamp
  - **created_at** (string) - Creation timestamp
  - **cve** (string) - Common Vulnerabilities and Exposures identifier
  - **cnnvd** (string) - China National Vulnerability Database of Information Security identifier
  - **published_at** (string) - Publication timestamp

#### Response Example
{
  "example": "response body"
}
```

--------------------------------

### Get User Info

Source: https://www.zoomeye.ai/help/api-usage

Retrieve information about the current user, including username, email, and subscription details.

```APIDOC
## Get User Info

### Description
Retrieve information about the current user, including username, email, and subscription details.

### Method
POST

### Endpoint
/v2/userinfo

### Request Example
```bash
curl -X POST https://api.zoomeye.ai/v2/userinfo -H "API-KEY: $YOUR_API_KEY"
```

### Response
#### Success Response (200)
- **code** (integer) - Response code
- **message** (string) - Response message
- **data** (object) - User information and subscription details
  - **username** (string) - Username
  - **email** (string) - User email
  - **phone** (string) - User phone number
  - **created_at** (string(date-time)) - user creation time
  - **subscription** (object) - subscription information
    - **plan** (string) - subscription plan
    - **end_date** (string(date-time)) - subscription end date
    - **points** (string) - Available General Points
    - **zoomeye_points** (string) - Available ZoomEye-Points

### Response Example
```json
{
  "code": 60000,
  "message": "success",
  "data": {
    "username": "abc",
    "email": "user@example.com",
    "phone": "+1234567890",
    "created_at": "2023-01-15T08:00:00Z",
    "subscription": {
      "plan": "Premium",
      "end_date": "2024-01-20T00:00:00Z",
      "points": "30000",
      "zoomeye_points": "10000000"
    }
  }
}
```
```

--------------------------------

### Get User Information

Source: https://www.zoomeye.ai/help

Retrieves the current user's information, including username, email, phone number, and subscription details.

```APIDOC
## POST /v2/userinfo

### Description
Retrieves the current user's information, including username, email, phone number, and subscription details.

### Method
POST

### Endpoint
https://api.zoomeye.ai/v2/userinfo

### Request Example
```bash
curl -X POST https://api.zoomeye.ai/v2/userinfo -H "API-KEY: $YOUR_API_KEY"
```

### Response
#### Success Response (200)
- **code** (integer) - Response code
- **message** (string) - Response message
- **data** (object) - User information and subscription details
  - **username** (string) - Username
  - **email** (string) - User email
  - **phone** (string) - User phone number
  - **created_at** (string(date-time)) - user creation time
  - **subscription** (object) - subscription information
    - **plan** (string) - subscription plan
    - **end_date** (string(date-time)) - subscription end date
    - **points** (string) - Available General Points, You can also see it from here
    - **zoomeye_points** (string) - Available ZoomEye-Points, You can also see it from here

#### Response Example
```json
{
  "code": 60000,
  "message": "success",
  "data": {
    "username": "abc",
    "email": "user@example.com",
    "phone": "+1234567890",
    "created_at": "2023-01-15T08:00:00Z",
    "subscription": {
      "plan": "Premium",
      "end_date": "2024-01-20T00:00:00Z",
      "points": "30000",
      "zoomeye_points": "10000000"
    }
  }
}
```
```

--------------------------------

### Base64 Encode Query String

Source: https://www.zoomeye.ai/help

Convert your query conditions into a base64 encoded string to be used with the qbase64 parameter in the API request. This example shows how to encode 'title="knownsec"'.

```bash
#bash
 echo 'title="knownsec"' | base64
```

--------------------------------

### Vulnerability Details Lookup

Source: https://www.zoomeye.ai/help

Get detailed information about a specific vulnerability by its ID.

```APIDOC
## GET /v2/vuldb/{id}

### Description
Get detailed information about a specific vulnerability by its ID.

### Method
GET

### Endpoint
/v2/vuldb/{id}

### Parameters
#### Path Parameters
- **id** (string) - Required - The unique identifier of the vulnerability, eg: CVE-xxxx-xxxxx,CNVD-xxxx-xxxxx,CNVD-xxxx-xxxxx

### Request Example
```bash
curl -X GET 'https://api.zoomeye.ai/v2/vuldb/CVE-2023-46747' -H "API-KEY: $YOUR_API_KEY"
```

### Response
#### Success Response (200)
- **id** (string) - The unique identifier of the vulnerability.
- **name** (string) - The name of the vulnerability.
- **description** (string) - A detailed description of the vulnerability.
- **cvss_score** (float) - The CVSS score of the vulnerability.
- **published_at** (string) - The date the vulnerability was published.
- **references** (list) - A list of references related to the vulnerability.

#### Response Example
```json
{
  "id": "CVE-2023-46747",
  "name": "FortiOS SSL VPN RCE Vulnerability",
  "description": "A remote command execution vulnerability in FortiOS SSL VPN.",
  "cvss_score": 9.8,
  "published_at": "2023-10-26T12:00:00Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2023-46747"
  ]
}
```
```

--------------------------------

### Bugbounty Asset Search

Source: https://www.zoomeye.ai/help/api-usage

Get bugbounty network asset information based on query conditions.

```APIDOC
## POST /v2/bugbounty

### Description
Get bugbounty network asset information based on query conditions.

### Method
POST

### Endpoint
https://api.zoomeye.ai/v2/bugbounty

### Parameters
#### Query Parameters
- **qbase64** (string) - Required - Base64 encoded query string. For more, refer to **Related references**.
- **fields** (string) - Optional - The fields to return, separated by commas. Default: ip,port,domain,update_time,bugbounty.source,is_new,is_changed. For more, refer to **Response field description**.
- **sub_type** (string) - Optional - Data type, supports v4, v6, and web. Default is v4.
- **page** (integer) - Optional - View asset page number.
- **facets** (string) - Optional - Statistical items, separated by commas if there are multiple. Supports country, subdivisions, city, product, service, device, OS, and port.
- **ignore_cache** (boolean) - Optional - Whether to ignore the cache. false, supported by Business plan and above.

### Request Example
```json
{
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK",
  "page": 1
}
```

### Response
#### Success Response (200)
- **code** (integer) - Success code.
- **message** (string) - Success message.
- **query** (string) - The executed query.
- **total** (integer) - Total number of results.
- **data** (array) - Array of asset data.
  - **current** (object) - Latest information.
  - **previous** (object) - Previous information.
  - **changed** (object) - Changing information.
- **facets** (object) - Facet data.

#### Response Example
```json
{
  "code": 60000,
  "message": "success",
  "query": "bugbounty.source = hackerone",
  "total": 38641,
  "data": [
    {
      "current": {
        "update_time": "2025-07-15T18:36:12.102579",
        "port": 443,
        "ip": "23.210.26.134",
        "header": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en...",
        "domain": "api.dyson.ch",
        "is_changed": true
      },
      "previous": {
        "update_time": "2025-07-15T18:20:04.804647",
        "port": 443,
        "ip": "23.210.216.156",
        "header": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en...",
        "domain": "api.dyson.ch",
        "is_changed": true
      },
      "changed": {
        "ip": true,
        "header": true
      }
    }
  ],
  "facets": {}
}
```
```

--------------------------------

### Get User Information

Source: https://www.zoomeye.ai/help/api-usage

Use this endpoint to retrieve details about your ZoomEye account, including username, email, and subscription status. Requires your API key for authentication.

```bash
# Bash
curl -X POST https://api.zoomeye.ai/v2/userinfo -H "API-KEY: $YOUR_API_KEY"
```

--------------------------------

### Search Network Assets by Query

Source: https://www.zoomeye.ai/help

This endpoint allows you to search for network assets using various query conditions. The `qbase64` parameter must be a Base64 encoded query string. You can specify fields to return, data type (v4, v6, web), page number, and page size.

```bash
# Bash
curl -X POST 'https://api.zoomeye.ai/v2/search' -H "API-KEY: $YOUR_API_KEY" \
-H 'content-type: application/json' \
-d '{
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK",
  "page": 1
}'

```

--------------------------------

### Initialize ZoomEye SDK with API Key

Source: https://www.zoomeye.ai/help

Initialize the ZoomEye SDK using an API key for authenticated searches. This is useful for automating asset discovery and managing attack surfaces.

```python
import zoomeyeai.sdk as zoomeye
# Use API-KEY search
zm = zoomeye.ZoomEye(api_key="01234567-acbd-00000-1111-22222222222")
data = zm.search('country=cn')
```

--------------------------------

### Base64 Encoding Conversion

Source: https://www.zoomeye.ai/help/api-usage

Demonstrates how to convert query conditions to base64 encoding for use with the API's qbase64 parameter.

```APIDOC
## Base64 Encoding Conversion

Convert the query condition to base64 encoding and pass it to the API as a qbase64 parameter.

```bash
 echo 'title="knownsec"' | base64
```
```

--------------------------------

### Search Vulnerability Database

Source: https://www.zoomeye.ai/help

Use this endpoint to retrieve vulnerability information based on query parameters. Ensure you include your API key in the request headers.

```bash
# Bash
curl -X GET 'https://api.zoomeye.ai/v2/search/vuldb?search=tongda' -H "API-KEY: $YOUR_API_KEY"
```

--------------------------------

### Vulnerability Search

Source: https://www.zoomeye.ai/help/api-usage

Retrieve vulnerability information by querying the vuldb endpoint. You can filter results by vendor, product, and pagination parameters.

```APIDOC
## Vulnerability Search

Get vulnerability information based on query parameters.
`GET /v2/search/vuldb`

### Description
Retrieve vulnerability information by querying the vuldb endpoint. You can filter results by vendor, product, and pagination parameters.

### Method
GET

### Endpoint
/v2/search/vuldb

### Parameters
#### Query Parameters
- **page_size** (integer) - Optional - Number of items per page, default is 10, maximum is 100
- **page** (integer) - Optional - Page number
- **vendor** (string) - Optional - Filter statistics by vendor name
- **product** (string) - Optional - Filter statistics by product name

### Request Example
```
# Bash
curl -X GET 'https://api.zoomeye.ai/v2/search/vuldb?search=tongda' -H "API-KEY: $YOUR_API_KEY"
```

### Response
#### Success Response (200)
- **code** (integer) - Response code
- **message** (string) - Response message
- **data** (object) - Vulnerability details
  - **id** (string) - Unique identifier of the vulnerability
  - **title** (string) - Title of the vulnerability
  - **description** (string) - Detailed description of the vulnerability
  - **affected** (array) - Affected products information
    - **vendor** (string) - Vendor name
    - **product** (string) - Product name
    - **version** (string) - Affected version
  - **references** (array) - Reference links
    - **url** (string) - Reference URL
    - **name** (string) - Reference name
    - **tags** (array) - Reference tags
  - **severity** (object) - Severity information
    - **value** (string) - Severity level (low, medium, high, critical)
    - **source** (string) - Source of severity assessment
    - **score** (number) - Numerical severity score
  - **recommendation** (array) - Remediation recommendations
    - **type** (string) - Type of recommendation (official, temp)
    - **content** (string) - Recommendation content
  - **cwe** (array) - Common Weakness Enumeration information
    - **cwe_id** (string) - CWE identifier
    - **description** (string) - CWE description
  - **cvss** (array) - Common Vulnerability Scoring System information
    - **version** (string) - CVSS version
    - **score** (number) - CVSS score
    - **vector_string** (string) - CVSS vector string
    - **severity** (string) - CVSS severity level
  - **cpes** (array) - Common Platform Enumeration identifiers
  - **cnvd** (string) - China National Vulnerability Database identifier
  - **epss** (object) - Exploit Prediction Scoring System information
    - **cve_id** (string) - CVE identifier
    - **epss** (number) - EPSS score
    - **percentile** (number) - EPSS percentile
  - **updated_at** (string) - Last update timestamp
  - **created_at** (string) - Creation timestamp
  - **cve** (string) - Common Vulnerabilities and Exposures identifier
  - **cnnvd** (string) - China National Vulnerability Database of Information Security identifier
  - **published_at** (string) - Publication timestamp

#### Response Example
{
  "code": 200,
  "message": "Success",
  "data": {
    "id": "CVE-2023-12345",
    "title": "Example Vulnerability",
    "description": "This is a detailed description of the example vulnerability.",
    "affected": [
      {
        "vendor": "ExampleVendor",
        "product": "ExampleProduct",
        "version": "1.0"
      }
    ],
    "references": [
      {
        "url": "http://example.com/ref",
        "name": "Example Reference",
        "tags": ["exploit", "poc"]
      }
    ],
    "severity": {
      "value": "high",
      "source": "NVD",
      "score": 8.5
    },
    "recommendation": [
      {
        "type": "official",
        "content": "Update to the latest version."
      }
    ],
    "cwe": [
      {
        "cwe_id": "CWE-79",
        "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      }
    ],
    "cvss": [
      {
        "version": "3.1",
        "score": 8.5,
        "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "severity": "high"
      }
    ],
    "cpes": ["cpe:2.3:a:examplevendor:exampleproduct:1.0:*:*:*:*:*:*:*"],
    "cnvd": "CNVD-2023-12345",
    "epss": {
      "cve_id": "CVE-2023-12345",
      "epss": 0.95,
      "percentile": 0.99
    },
    "updated_at": "2023-10-27T10:00:00Z",
    "created_at": "2023-10-26T09:00:00Z",
    "cve": "CVE-2023-12345",
    "cnnvd": "CNNVD-2023-12345",
    "published_at": "2023-10-26T09:00:00Z"
  }
}
```

--------------------------------

### Search Bugbounty Assets with cURL

Source: https://www.zoomeye.ai/help

Use this cURL command to send a POST request to the /v2/bugbounty endpoint with a base64 encoded query and page number. Ensure you replace $YOUR_API_KEY with your actual API key.

```bash
# Bash
curl -X POST 'https://api.zoomeye.ai/v2/bugbounty' -H "API-KEY: $YOUR_API_KEY" \
-H 'content-type: application/json' \
-d '{
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK",
  "page": 1
}'
```

--------------------------------

### Fetch Vulnerability Details by ID

Source: https://www.zoomeye.ai/help

Retrieves detailed information for a specific vulnerability using its unique identifier. Requires an API key for authentication.

```bash
curl -X GET 'https://api.zoomeye.ai/v2/vuldb/CVE-2023-46747' -H "API-KEY: $YOUR_API_KEY"
```

--------------------------------

### Search Network Assets

Source: https://www.zoomeye.ai/help/api-usage

Query the ZoomEye API to find network asset information based on specified conditions. The query must be Base64 encoded, and you can specify pagination and fields to return.

```bash
# Bash
curl -X POST 'https://api.zoomeye.ai/v2/search' -H "API-KEY: $YOUR_API_KEY" \
-H 'content-type: application/json' \
-d '{
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK",
  "page": 1
}'
```

--------------------------------

### Base64 Encode Query Condition

Source: https://www.zoomeye.ai/help

Converts a query condition string to base64 encoding. This is used when passing query parameters to the API via the `qbase64` parameter.

```bash
echo 'title="knownsec"' | base64
```

--------------------------------

### Vulnerability Details

Source: https://www.zoomeye.ai/help/api-usage

Retrieves detailed information about a specific vulnerability using its unique identifier.

```APIDOC
## Vulnerability Details

Get detailed information about a specific vulnerability by its ID.
`GET /v2/vuldb/{id}`

### Description
Retrieves detailed information about a specific vulnerability by its ID.

### Method
GET

### Endpoint
`/v2/vuldb/{id}`

### Parameters
#### Path Parameters
- **id** (string) - Required - The unique identifier of the vulnerability, eg: CVE-xxxx-xxxxx, CNVD-xxxx-xxxxx, CNVD-xxxx-xxxxx

### Request Example
```bash
curl -X GET 'https://api.zoomeye.ai/v2/vuldb/CVE-2023-46747' -H "API-KEY: $YOUR_API_KEY"
```
```

--------------------------------

### Bugbounty Asset Search

Source: https://www.zoomeye.ai/help

Retrieves bugbounty network asset information based on query conditions. Supports filtering by encoded query string, fields, sub-type, page number, facets, and cache options.

```APIDOC
## POST /v2/bugbounty

### Description
Get bugbounty network asset information based on query conditions.

### Method
POST

### Endpoint
/v2/bugbounty

### Parameters
#### Query Parameters
- **qbase64** (string) - Required - Base64 encoded query string. For more, refer to **Related references**.
- **fields** (string) - Optional - The fields to return, separated by commas. Default: ip,port,domain,update_time,bugbounty.source,is_new,is_changed. For more, refer to **Response field description**.
- **sub_type** (string) - Optional - Data type, supports v4, v6, and web. Default is v4.
- **page** (integer) - Optional - View asset page number.
- **facets** (string) - Optional - Statistical items, separated by commas if there are multiple. Supports country, subdivisions, city, product, service, device, OS, and port.
- **ignore_cache** (boolean) - Optional - Whether to ignore the cache. false, supported by Business plan and above.

### Request Example
```json
{
  "qbase64": "dGl0bGU9ImNpc2NvIHZwbiIK",
  "page": 1
}
```

### Response
#### Success Response (200)
- **code** (integer) - Success code.
- **message** (string) - Success message.
- **query** (string) - The executed query.
- **total** (integer) - Total number of results.
- **data** (array) - Array of asset data.
  - **current** (object) - Latest information.
  - **previous** (object) - Previous information.
  - **changed** (object) - Changing information.
- **facets** (object) - Facet statistics.

#### Response Example
```json
{
  "code": 60000,
  "message": "success",
  "query": "bugbounty.source = hackerone",
  "total": 38641,
  "data": [
    {
      "current": {
        "update_time": "2025-07-15T18:36:12.102579",
        "port": 443,
        "ip": "23.210.26.134",
        "header": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en...",
        "domain": "api.dyson.ch",
        "is_changed": true
      },
      "previous": {
        "update_time": "2025-07-15T18:20:04.804647",
        "port": 443,
        "ip": "23.210.216.156",
        "header": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en...",
        "domain": "api.dyson.ch",
        "is_changed": true
      },
      "changed": {
        "ip": true,
        "header": true
      }
    }
  ],
  "facets": {}
}
```
```
Tokens:
Raw