Skip to content

jivoi/awesome-osint

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,048 Commits
CONTRIBUTING.md
CONTRIBUTING.md
 
 
LICENSE.txt
LICENSE.txt
 
 
README.md
README.md
 
 
_config.yml
_config.yml
 
 
osint_logo.png
osint_logo.png
 
 

Repository files navigation

Awesome OSINT Awesome

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources).

This list is to help all of those who are into Cyber Threat Intellience (CTI), threat hunting, or OSINT. From beginners to advanced.

Happy hacking and hunting 🧙‍♂️

📖 Table of Contents

↑ Contributing

Please read CONTRIBUTING if you wish to add tools or resources. Feel free to help 🥰 us grow this list with great resources.

↑ Credits

This list was taken partially taken from i-inteligence's OSINT Tools and Resources Handbook.

Thanks to our main contributors jivoi EK_ & spmedia

↑ General Search

The main search engines used by users.

  • Aol - The web for America.
  • Ask - Ask something and get a answer.
  • Bing - Microsoft´s search engine.
  • Brave - a private, independent, and transparent search engine.
  • DuckDuckGo - an Internet search engine that emphasizes protecting searchers' privacy.
  • Goodsearch - a search engine for shopping deals online.
  • Google Search - Most popular search engine.
  • Instya - You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
  • Impersonal.me
  • Lycos - A search engine for pictures, videos, news and products.
  • Mojeek - A growing independent search engine which does not track you.
  • Search.com - Search the Web by searching the best engines from one place.
  • Wolfram Alpha - Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough algorithms, knowledgebase and AI technology.
  • Yahoo! Search - The search engine that helps you find exactly what you're looking for.
  • YOU - AI search engine.

↑ Main National Search Engines

Localized search engines by country.

↑ Meta Search

Lesser known and used search engines.

↑ Speciality Search Engines

Search engines for specific information or topics.

  • 2lingual Search
  • Abusech - Hunt across all abuse.ch platforms with one simple query
  • Abuseipdb - Repository of abuses reported by system administrators for IPs, Domains, and subnets
  • BeVigil - Search for assets like Subdomains, URLs, Parameters in mobile applications
  • Biznar
  • Browserleaks - BrowserLeaks tests your browser for privacy and fingerprinting leaks
  • Censys - Searcher that monitors and analyzes devices.
  • Cisco Talos Intelligence - IP and Domain Reputation Center for real-time threat detection
  • CiteSeerX
  • Criminal IP - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
  • CRT Certificate Search - Allows you to search for public SSL/TLS certificates recorded in Certificate Transparency logs
  • Fofa - Asset search and analysis tool.
  • Google Custom Search
  • GrayhatWarfare - Searches and indexes open Amazon S3 buckets, allowing users to find and explore potentially exposed data.
  • Harmari (Unified Listings Search)
  • Intelligence X - Paid OSINT Tool Allowing users to search for information across various sources including the dark web and public data leaks.
  • Internet Archive
  • Islegitsite - Checks if a website is trustworthy by analyzing its reputation, domain, and security based on public sources.
  • Mamont
  • Million Short
  • Netlas.io
  • ODIN - Used to search for Hosts, CVEs & Exposed Buckets/Files and shows a website is vulnerable or not. 10 Free Searches Per Day.
  • OCCRP Aleph
  • Search Abuseipdb - Tool to query IPs, ranges and ASN blocks in AbuseIPDB via API with CIDR notation.
  • Shodan - Shodan is a search engine for the IOT(Internet of Things) that allows you to search variety of servers that are connected to the internet using various searching filters.
  • WIPO
  • WorldWideScience.org
  • Wpscan - Scan your WordPress site and get an instant report on its security.
  • Zanran

↑ Dark Web Search Engines Search Engines

↑ Visual Search and Clustering Search Engines

Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.

↑ Similar Sites Search

Find websites that are similar. Good for business competition research.

↑ Document and Slides Search

Search for data located on PDFs, Word documents, presentation slides, and more.

↑ Digital Footprint Tools

Analyze your Digital Footprints on the internet.

  • Mine - Mine allows you to discover where your personal data is, and reduce your online exposure to minimize digital risks.
  • Yorba - Yorba helps you regain control of your digital life. We find and delete old accounts, cancel unwanted subscriptions, and unsubscribe you from emails you never open—making your inbox cleaner, your footprint leaner, your privacy stronger.

↑ File Search

Search for all kind of files.

↑ Pastebins

Find information that has been uploaded to Pastebin & alternative pastebin-type sites

  • 0bin
  • BeanPaste - A tiny way to share text.
  • bpaste - Welcome to bpaste, this site is a pastebin. It allows you to share code with others.
  • CentOS Pastebin Service - Stikked is an Open-Source PHP Pastebin, with the aim of keeping a simple and easy to use user interface.
  • cl1p - The Internet Clipboard.
  • commie - commie is a pastebin script with line commenting support.
  • Context - Share whatever you see with others in seconds.
  • ControlC Pastebin - The easiest way to host your text.
  • Cryptobin - The Ultimate Secure Pastebin
  • Cutapaste - Short Code and Share.
  • Defuse - Encrypted Pastebin - Keep your data private and secure!
  • doxbin - A dox style pastebin ran by hackers.
  • dpaste2
  • dpaste
  • Etusivu - It's an open source clone of pastebin.com. Default Language is Finnish.
  • Friendpaste - Paste stuff to your friends.
  • GitHub gist
  • HashBin - HashBin is a paste bin that never sees the contents of its pastes.
  • hastebin
  • ideone
  • ivpaste
  • jsbin
  • justpaste
  • Katbin - Small, lightweight pastebin.
  • Linkode(alpha) - Linkode is the useful pastebin!
  • Logpasta - Simple, secure log paste service. Command line mode based.
  • lesma.eu - Simple paste app friendly with browser and command line.
  • Nachricht - With Nachricht.co you can send self-destructive and encrypted one-way messages over the Internet. You don't even need to miss out the messenger or social network of your choice. We are an independent, secure and fully free service!
  • NoPaste - NoPaste is an open-source website similar to Pastebin where you can store any piece of code, and generate links for easy sharing.
  • nopaste.net - nopaste.net is a temporary file host, nopaste and clipboard across machines. You can upload files or text and share the link with others.
  • Notes - fast.easy.short.
  • nekobin - Paste code, save and share the link!
  • New Paste - I wanna paste because typing is so boring!
  • n0paste - Paste and share your code online.
  • OTS- One Time Secrets - An encrypted pastebin site. No login needed!
  • paaster - Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
  • PastBin.net - Similar to Pastebin website where you can store code/text online for a set period of time and share to anyone anywhere. Search Option Available.
  • Pastebin - Store code/text online for a set period of time and share to anybody on earth.
  • Pastebin.cz - A simple Pastebin.
  • Paste.Cash - Paste.CASH Is a privacy respected and encrypted pastebin hosted by Cash Hosting. Every paste are encrypted using 256 bits AES.
  • paste.centos
  • paste.debian
  • paste.ee
  • PasteFree.com - Popular Paste and Share Site.
  • paste.in.ua - Simple pastebin.
  • paste.kde
  • Pastelyst - This site is intended for use as a short-term exchange of pasted information between parties. All publicly submitted data is considered public information. Submitted private and public data is not guaranteed to be permanent, and may be removed at any time.
  • Paste.Monster - Share your thoughts online. API Available.
  • paste.ubuntu
  • Paste.Quest - Copy and Paste text online to share with anyone anywhere. Use the password option to add a password to the pasted information.
  • Pastery - The sweetest pastebin in the world!
  • PasteSite.Net - The new generation pastebin.
  • paste.sh - This is an encrypted paste site. Simply type or paste code here and share the URL. Saving is Automatic.
  • PasteShr - Store any text online for easy sharing. Search option available!
  • Pastebin - Tor Link - Paste text to store or share with others.
  • Rentry - Rentry.co is a markdown paste service service with preview, custom urls and editing. Fast, simple and free.
  • SafeNote - SafeNote is a free web-based service that allows you to share a note or a file with confidentiality. There is no way to spying on you even to a hacker.
  • scrt.link - Share a Secret with a link that only works one time and then self-destructs.
  • snippet.host - Minimal text and code snippet hosting.
  • Spacebin - Spacebin is a modern Pastebin server implemented in Go and is capable of serving notes, novels, code, or any other form of text.
  • TextBin - Secure pastebin where you can paste and store any type of text or code snippets online and share it with your friends.
  • Textbin-Code - SECURE YOUR CODE!
  • Tiny Paste - Simple Pastebin. Login option available!
  • TutPaste - Welcome to our fast and free online paste tool. Paste and share your text or code snippets with anyone, anywhere, no registration required.
  • vaultbin - Vaultbin is a blazingly fast and secure alternative to Pastebin and Hastebin.
  • Verybin - Anonymous and encrypted pastebin. Data is encrypted/decrypted in the browser using 256 bits AES and no IP address logged.
  • Write.as - Type words, put them on the internet.
  • ZBin - Private & Secure Pastebin.
  • ZeroBin - ZeroBin is a minimalist, opensource online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

↑ Code Search

Search by website source code

  • AnalyzeID - Find Other Websites Owned By The Same Person
  • Code Finder - The ultimate search engine for finding GitHub repositories
  • grep.app - Searches code from the entire github public repositories for a given specific string or using regular expression.
  • NerdyData - Search engine for source code.
  • PublicWWW
  • Reposearch
  • SearchCode - Help find real world examples of functions, API's and libraries across 10+ sources.
  • Sourcebot - Index thousands of repos on your machine and search through them in a fast, powerful, and modern web interface.
  • SourceGraph - Search code from millions of open source repositories.

↑ Major Social Networks

↑ Real-Time Search, Social Media Search, and General Social Media Tools

Social Media Tools

↑ Twitter

↑ Facebook

↑ Instagram

  • Iconosquare
  • Osintgram - Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname.
  • Picodash - Find Instagram Target Audience and Influencers
  • Sterra - Instagram OSINT tool to export and analyse followers | following with their details
  • Toutatis - a tool that allows you to extract information from instagrams accounts such as s, phone numbers and more

↑ Pinterest

↑ Reddit

Tools to help discover more about a reddit user or subreddit.

  • Arctic Shift - A tool for accessing and interacting with large dumps of Reddit data, offering an API and web interface for research and moderation purposes.
  • Imgur - The most popular image hosting website used by redditors.
  • Mostly Harmless - Mostly Harmless looks up the page you are currently viewing to see if it has been submitted to reddit.
  • Pushshift API - A powerful API that provides access to historical Reddit data, including posts, comments, and metadata for analysis and research—more information here.
  • Pullpush - PullPush is a service for the indexing and retrieval of content that Reddit users have submitted to Reddit. Helpful for finding deleted/removed posts & comments.
  • REDARCS - Reddit archives 2005-2023.
  • Reddit Archive - Historical archives of reddit posts.
  • Reddit Suite - Enhances your reddit experience.
  • Reddit User Analyser - reddit user account analyzer.
  • RedditMetis - RedditMetis is a Reddit user analysis tool to see the summary and statistics for a Reddit account, including top posts and user activity etc.
  • Subreddits - Discover new subreddits.
  • Reddit Comment Search - Analyze a reddit users by comment history.
  • Universal Scammer List - This acts as the website-portion for the subreddit /r/universalscammerlist. That subreddit, in conjuction with this website and a reddit bot, manages a list of malicious reddit accounts and minimizes the damage they can deal. This list is referred to as the "USL" for short.
  • Reddit Comment Lookup - Search for reddit comments by reddit username.

↑ VKontakte

Perform various OSINT on Russian social media site VKontakte.

↑ Tumblr

↑ LinkedIn

↑ Telegram

  • GroupDa - Can be used for Searching Telegram Channels. Search by Category, Countries and Language.
  • Maltego Telegram - Rich Set of Entities & Transforms for OSINT on Telegram with Maltego.
  • TgramSearch - Convenient search for Telegram channels, as well as a structured catalog with over 700000 Telegram channels. Available in 8+ Languages.
  • tgworld - The Global Search System TG.World will help you find Channels, Groups and Bots in Telegram in any language and for any country in the world!
  • Telegram Channel Joiner - grow your Free and Premium Telegram accounts easily with this channel joiner script.
  • Teleteg - The ultimate Telegram search engine. 10 results for free plan.
  • Telegago - A Google Advanced Search specifically for finding public and private Telegram Channels and Chatrooms.
  • Telegram Nearby Map - Webapp based on OpenStreetMap and the official Telegram library to find the position of nearby users.
  • Telegram channels scraper TeleGraphite - Telegram Scraper & JSON Exporter & telegram channels scraper.
  • TeleSearch - Search and find your desired Telegram channels, groups, bots and games quickly and easily with Telesearch​.

↑ Steam

  • OSINT-Steam - An open-source tool that returns public information, such as friends list and possible locations, from Steam profiles.

↑ Blog Search

↑ Forums and Discussion Boards Search

↑ Username Check

  • Blackbird - Search a username across over 600+ websites.
  • CheckUser - search username across social networks
  • Cupidcr4wl - Username and phone number search tool that crawls adult content platforms to see if a targeted account or person is present.
  • Digital Footprint Check - Check for registered username on 100s of sites for free.
  • IDCrawl - Search for a username in popular social networks.
  • Maigret - Collect a dossier on a person by username.
  • Name Chk - Check over 30 domains and more than 90 social media account platforms.
  • Name Checkr - checks a domain and username across many platforms.
  • Name Checkup - is a search tool that allows you to check the avilability of a givrn username from all over the social media. Inaddition it also sllows you to check the avilability of a given domain name.
  • NameKetchup - checks domain name and username in popular social media sites and platforms.
  • NexFil - checks username from almost all social network sites.
  • Seekr A multi-purpose all in one toolkit for gathering and managing OSINT-Data with a neat web-interface. Can be used for note taking and username checking.
  • Sherlock - Search for a username in multiple platforms/websites.
  • SherlockEye - Search for publicly available information connected to a username, uncovering associated profiles and activities across the web.
  • Snoop - Search for a nickname on the web (OSINT world)
  • Social Analyzer - API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
  • User Search - Find someone by username, email, phone number or picture across Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs, 3000+ sites Supported!
  • User Searcher - User-Searcher is a powerful and free tool to help you search username in 2000+ websites.
  • WhatsMyName - check for usernames across many different platforms.

↑ People Investigations

  • 192 (UK) - Search by person, business, address. Limited free info, premium data upsell.
  • 411 (US) - Search by person, phone number, address, and business. Limited free info, premium data upsell.
  • Ancestry - Premium data, free trial with credit card.
  • Apollo.io - Free B2B Phone Number & Email Finder. 1200 credits per user/year for free plan.
  • BeenVerified
  • Black Book Online - Free. Nationwide directory of public record lookups.
  • Canada411 - Search by person, phone number, and business. Free.
  • Classmates - High-school focused people search. Free acounts allow creating a profile and viewing other members. Premium account required to contact other members.
  • ContactOut - Unlock the world's most accurate contact data. Find emails & phone for 300M professionals.
  • Clustermaps - Find people and address information associated with them
  • CrunchBase - Business information database, with a focus on investment, acquisition, and executive data. Ancillary focus on market research and connecting founders and investors.
  • FaceCheck.ID - Search the internet by face.
  • Family Search - Popular genealogy site. Free, but registration required. Funded by The Church Of Jesus Christ of Latter-day Saints.
  • FamilyTreeNow - Research family and geneology, no registration required, can search addresses, phone numbers, and email addresses as well as associations.
  • Federal Bureau of Prisons - Inmate Locator (US) - Search federal inmates incarcerated from 1982 to the present.
  • Fold3 (US Military Records) - Search military records. Search filters limited with free access. Premium access requires subscription.
  • Genealogy Bank - Premium data, free trial with credit card.
  • Genealogy Links - Genealogy directory with over 50K links.
  • Homemetry - Reverse address search and allows searching for properties for sale/rent..
  • InfoTracer - Search for people. (Searches are paid)
  • Judyrecords - Free. Nationwide search of 400 million+ United States court cases.
  • Kompass - Business directory and search.
  • Mugshots
  • OpenSanctions - Information on sanctions and public office holders.
  • PeekYou - PeekYou offers the ability to search for people with checks done against more sites. Can check for arrest records as well.
  • Reunion - People search. Limited free info, premium data upsell.
  • Socialcatfish - Superextensive people search which works worldwide. Searches are done from 200 Billion records.
  • SearchBug - People search. Limited free info, premium data upsell.
  • Spokeo - People search. Limited free info, premium data upsell.
  • The National Archives (UK) - Search UK national archives.
  • UniCourt - Limited free searches, premium data upsell. Nationwide search of 100 million+ United States court cases.
  • UK Phone Book - Search people in a similar way as 192.com
  • VineLink - Inmate search and notification service for victims of crime, linked to multiple correctional facilities' booking systems in the U.S.
  • Voter Records - Free political research tool to study more than 100 Million US voter records.
  • White Pages (US) - People search. Limited free info, premium data upsell.
  • ZabaSearch

↑ Email Search / Email Check

  • Blackbird - Search for accounts associated with a given email across various platforms.

  • DeHashed - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the world’s largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise.

  • Email Address Validator - Improve deliverability, reduce bounce rates, prevent fraud and minimize funnel leaks.

  • Email Format - is a website that allows you to find email address formats used by different companies.

  • Email Permutator - a powerful tool designed to aid professionals in generating a range of potential email addresses for a specific contact.

  • EmailHippo - is an email address verification platform that will check whether a given email address exist or not.

  • Ghunt - Investigate Google emails and documents.

  • Gitrecon - Node.js tool to scan GitHub repositories for exposed email addresses and names.

  • h8mail - Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email.

  • Have I Been Pwned - Search across multiple data breaches to see if your email address has been compromised.

  • Holehe - allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

  • Hunter - Hunter lets you find email addresses in seconds and connect with the people that matter for your business.

  • LeakCheck - Data Breach Search Engine with 7.5B+ entries collected from more than 3000 databases. Search by e-mail, username, keyword, password or corporate domain name.

  • LeakRadar - Scans for compromised emails and domains in stealer logs, offering proactive breach prevention and real-time alerts.

  • MailTester - hunt for emails and improve your email deliverability

  • Minerva OSINT - Email search tool that finds and aggregates data on a target email from over a hundred websites.

  • mxtoolbox - Free online tools to investigate/troubleshoot email server issues.

  • OSINTEye - OSINT Eye: A WPF Desktop Application for GitHub Intelligence, Social Media Reconnaissance, and Subdomain Discovery

  • Peepmail - is a tool that allows you to discover business email addresses for users, even if their email address may not be publicly available or shared.

  • Pipl - a provider of identity solutions.

  • Reacher - Real-time email verification API, written in Rust, 100% open-source.

  • Secureito - Secureito detects data breaches involving your email and suggests protection measures.

  • SherlockEye - Search for publicly available data linked to an email address across multiple sources on the internet.

  • Snov.io - Find email addresses on any website.

  • Spamhaus - Lookup Reputation Checker.

  • ThatsThem - Reverse Email Lookup.

  • Toofr - Find Anyone’s Email Address in Seconds.

  • Verify Email - The fastest and most accurate email verification tool.

  • VoilaNorbert - Find anyone's contact information for lead research or talent acquisition.

↑ Phone Number Research

  • CallerID Test - Get caller ID and telco carrier information back from a phone number.
  • EmobileTracker.com - a service specifically designed to Track Mobile Number, Location on Google Map including information such as the owner's Name,Location,Country,Telecom provider.
  • FreeCarrierLookup - enter a phone number and we'll return the carrier name and whether the number is wireless or landline. We also return the email-to-SMS and email-to-MMS gateway addresses for USA and Canadian* phone numbers.
  • Infobel - Search 164+ million records across 73 countries for companies and individuals. Find places, local service providers, their contact details, reviews, opening hours and more.
  • InMobPrefix - Dataset, charts, models about mobile phone numbers prefixes in India along with their respective state, operator.
  • Phone Validator - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
  • PhoneInfoga - Advanced information gathering & OSINT framework for phone numbers.
  • Reverse Phone Check - Look up names, addresses, phone numbers, or emails and anonymously discover information about yourself, family, friends, or old schoolmates. Powered by infotracer.com
  • Reverse Phone Lookup - Detailed information about phone carrier, region, service provider, and switch information.
  • SearchPeopleFREE - a reverse name, address, email address, or phone lookup that allows you to discover the owner of a phone number or who lives at an address.
  • Spy Dialer - Get the voicemail of a cell phone & owner name lookup.
  • Sync.ME - a caller ID and spam blocker app.
  • Truecaller - Global reverse phone number search.
  • Twilio - Look up a phone numbers carrier type, location, etc. Twilio offers free accounts that come with credits you can use with their API. Each lookup is only ~$0.01-$0.02 typically on US and CAN numbers.
  • USPhoneBook - Reverse phone and address lookups and leading data.

↑ Vehicle / Automobile Research

  • FaxVIN - Vehicle History Reports. A license plate lookup tool that returns info like VIN, make & model of vehicle, age, and numerous other details.
  • EpicVIN - Vehicle reports are compiled from various data sources, including historical accident records from state agencies and other entities like NMVTIS. License plate lookup that returns VIN and car millage.

↑ Expert Search

↑ Company Research

↑ Job Search Resources

↑ Q&A Sites

↑ Domain and IP Research

  • aa419 Fake Sites Database - The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
  • Accuranker
  • ahrefs - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
  • Azure Tenant Resolution by PingCastle - Search for Azure Tenant using its domain name or its ID
  • Bgpview.io - The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
  • Bing Webmaster Tools
  • BuiltWith - is a website that will help you find out all the technologies used to build a particular websites.
  • Central Ops
  • Crypto Scam & Crypto Phishing URL Threat Intel Feed - A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
  • Dedicated or Not
  • DNS History
  • DNSDumpster - is a website that will help you discover hosts related to a specific domain.
  • DNSStuff
  • DNSViz
  • Domain Crawler
  • Domain Dossier
  • Domain Tools - Whois lookup and domain/ip historical data.
  • Easy whois
  • Exonera Tor - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
  • Follow.net
  • Fullhunt - FullHunt is an OSINT tool focused on identifying and protecting internet-exposed assets.
  • GraphyStories
  • Hudson Rock - is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
  • HypeStat
  • [Icann Lookup)(https://lookup.icann.org/en/lookup) - The site allows you to look up domain registration information (WHOIS) on the internet
  • Infosniper
  • intoDNS
  • IP 2 Geolocation
  • IP 2 Location
  • IP Geolocation API DB-IP - Pprovides IP geolocation and intelligence.
  • IP Checking
  • IP Location - is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
  • IP Location.io - IPLocation.io allows you to check the location of an IP for free
  • IPFingerprints - is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
  • IPVoid - IP address toolset.
  • Kloth
  • Majestic - Find out who links to your website.
  • MaxMind
  • MetaDefender - Threat analysis service for URLs, files, certificates, domains, and suspicious hashes.
  • Netcraft Site Report - is an online database that will provide you a report with detail information about a particular website and the history associated with it.
  • Open Site Explorer
  • OpenLinkProfiler
  • PageGlimpse
  • Pentest-Tools.com - uses advanced search operators (Google Dorks) to find juicy information about target websites.
  • PhishStats
  • Pulsedive
  • Quantcast
  • Quick Sprout
  • RedirectDetective
  • Remote DNS Lookup
  • Robtex - is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
  • SameID
  • SecurityTrails - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
  • SubDomainRadar.io - Fast subdomain finder with multiple search modes and the most extensive data sources, offering real-time notifications.
  • SEMrush
  • SEO Chat Tools
  • SEOTools for Excel
  • Similar Web - Compare any website traffic statistics & analytics.
  • SmallSEOTools
  • Squatm3gator - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
  • StatsCrop
  • TinyScan - Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
  • urlDNA - Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
  • URLhaus - URLhaus shares malicious URLs to combat malware and botnet threats
  • urlQuery
  • urlscan - is a free service to scan and analyse websites.
  • URLVoid - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
  • Validin - Website and API to search current and historical DNS records for free
  • Verisign
  • ViewDNS.info
  • Virus Total - Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
  • w3snoop - is a website that gives you a free and comprehensive report about a specific website.
  • Web-Check - All-in-one tool for viewing website and server meta data.
  • WebMeUp - is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
  • Webscout - A Swiss Army knife for scaled intelligence and metadata on IP addresses and domains.
  • Website Informer
  • WebsiteTechMiner.py - automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architecture lookups, etc.
  • WhatIsMyIPAddress
  • Who.is - Domain whois information.
  • Whois Arin Online - is a web service for Whois data contained within ARIN's registration database
  • WhoIsHostingThis
  • WhoisMind
  • Whoisology
  • WhoIsRequest
  • WiGLE - Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data to the public infoset.
  • You Get Signal

↑ Keywords Discovery and Research

↑ Web History and Website Capture

↑ Language Tools

↑ Image Search

↑ Image Analysis

↑ Video Search and Other Video Tools

  • Bing Videos
  • Clarify
  • Clip Blast
  • DailyMotion
  • Deturl - Download a YouTube video from any web page.
  • DownloadHelper - Download any video from any websites, it just works!
  • Earthcam - EarthCam is the leading network of live streaming webcams for tourism and entertainment.
  • Filmot - Search within YouTube subtitles. Indexing over 573 million captions across 528 million videos and 45 million channels.
  • Find YouTube Video - Searches currently 5 YouTube archives for specific videos by ID, which is really useful for finding deleted or private YouTube videos.
  • Frame by Frame - Browser plugin that allows you to watch YouTube videos frame by frame.
  • Geosearch
  • Insecam - Live cameras directory
  • Internet Archive: Open Source Videos
  • Metacafe
  • Metatube
  • Tubuep - Downloads online videos via yt-dlp, then reuploads them to the Internet Archive for preservation. Note: if you would like to archive comments too, you need to install version 0.0.33 and use the --get-comments flag, however you will still have the new yt-dlp fixes and features, but existing tubeup bugs cannot be fixed, unless you do manual work.
  • Veoh
  • Video Stabilization Methods
  • Vimeo
  • Yahoo Video Search
  • YouTube Data Viewer
  • YouTube Geofind
  • YouTube Metadata
  • YouTube
  • yt-dlp - Downloads videos from almost any online platform, along with information, thumbnails, subtitles, descriptions, and comments (comments only on a select few sites like Youtube and a few small sites). If a site is not supported, or a useful or crucial piece of metadata, including comments, is missing, create an issue.

↑ Academic Resources and Grey Literature

↑ Geospatial Research and Mapping Tools

↑ News

↑ News Digest and Discovery Tools

↑ Fact Checking

↑ Data and Statistics

↑ Web Monitoring

↑ Browsers

↑ Offline Browsing

↑ VPN Services

↑ Infographics and Data Visualization

↑ Social Network Analysis

↑ Privacy and Encryption Tools

↑ DNS

  • Amass - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
  • Columbus Project - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
  • findsubdomains - Automatically scans different sources to collect as many subdomains as can. Validate all the data through various tools and services to provide correct results without waiting.
  • Merklemap - Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Works by ingesting certificate transparency logs.

↑ Maritime

  • VesselFinder - a FREE AIS vessel tracking web site. VesselFinder displays real time ship positions and marine traffic detected by global AIS network.

↑ Other Tools

  • aadinternals - Provides tools and insights for advanced analysis and security testing of Azure Active Directory (AAD) and Microsoft 365.
  • Barcode Reader - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
  • Belati - The Traditional Swiss Army Knife For OSINT. Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose.
  • BeVigil-CLI - A unified command line interface and python library for using BeVigil OSINT API to search for assets such as subdomains, URLs, applications indexed from mobile applications.
  • Cyberbro - A self-hosted application, available as a Dockerized, for effortless searching and reputation checking of observables. Extracts IoCs from raw input and check their reputation using multiple services.
  • CyberGordon - CyberGordon is a threat intelligence search engine. It leverages 30+ sources.
  • CrowdSec - An open source, free, and collaborative IPS/IDS software written in Go, able to analyze visitor behavior & provide an adapted response to all kinds of attacks.
  • Datasploit - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
  • Discoshell - A simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others
  • Dorkgpt - Artificial intelligence that generates advanced search queries to find specific or hidden information on the internet.
  • DNSservices - Discover embedded services in a domain's DNS records within seconds
  • DuckDuckGo URL scraper - A simple DuckDuckGo URL scraper.
  • FOCA - Tool to find metadata and hidden information in the documents.
  • Glit - Retrieve all mails of users related to a git repository, a git user or a git organization.
  • Greynoise - "Anti-Threat Intelligence" Greynoise characterizes the background noise of the internet, so the user can focus on what is actually important.
  • Hunchly - Hunchly is a web capture tool designed specifically for online investigations.
  • Intrigue Core - Framework for attack surface discovery.
  • LinkScope Client - LinkScope Client Github repository.
  • LinkScope - LinkScope is an open source intelligence (OSINT) graphical link analysis tool and automation platform for gathering and connecting information for investigative tasks.
  • Maltego - Maltego is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
  • OpenRefine - Free & open source power tool for working with messy data and improving it.
  • Orbit - Draws relationships between crypto wallets with recursive crawling of transaction history.
  • OSINT Framework - Web based framework for OSINT.
  • OSINT-Tool - A browser extension that gives you access to a suite of OSINT utilities (Dehashed, Epieos, Domaintools, Exif data, Reverse image search, etc) directly on any webpage you visit.
  • OSINT.SH - Information Gathering Toolset.
  • OsintStalker - Python script for Facebook and geolocation OSINT.
  • Outwit - Find, grab and organize all kinds of data and media from online sources.
  • Photon - Crawler designed for OSINT
  • Pown Recon - Target reconnaissance framework powered by graph theory.
  • pygreynoise - Greynoise Python Library
  • QuickCode - Python and R data analysis environment.
  • Router Passwords - Online database of default router passwords.
  • SecApps Recon - Information gathering and target reconnaissance tool and UI.
  • SerpApi - Scrapes Google search and 25+ search engines with ease and retruns a raw JSON. Supports 10 API wrappers.
  • SerpScan - Powerful PHP script designed to allow you to leverage the power of dorking straight from the comfort of your command line. Analyzes data from Google, Bing, Yahoo, Yandex, and Badiu.
  • Sintelix - Sintelix is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
  • sn0int - Semi-automatic OSINT framework and package manager.
  • SpiderFoot - SpiderFoot Github repository.
  • SpiderFoot - SpiderFoot is an open source intelligence (OSINT) automation platform with over 200 modules for threat intelligence, attack surface monitoring, security assessments and asset discovery.
  • SpiderSuite - An advance, cross-platform, GUI web security crawler.
  • Sub3 Suite - A research-grade suite of tools for intelligence gathering & target mapping with both active and passive(100+ modules) intelligence gathering capabilities.
  • The Harvester - Gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
  • Unfurl - Unfurl analyzes and breaks down URLs into useful forensic components for digital investigation.
  • Zen - Find email addresses of Github users urls and other data effortlessly

↑ Threat Intelligence

  • GitGuardian - Public GitHub Monitoring - Monitor public GitHub repositories in real time. Detect secrets and sensitive information to prevent hackers from using GitHub as a backdoor to your business.
  • OnionScan - Free and open source tool for investigating the Dark Web. Its main goal is to help researchers and investigators monitor and track Dark Web sites.
  • onion-lookup - Free online service and API for checking the existence of Tor hidden services (.onion address) and retrieving their associated metadata. onion-lookup relies on an private AIL instance to obtain the metadata.
  • OTX AlienVault - Open Threat Exchange is the neighborhood watch of the global intelligence community. It enables private companies, independent security researchers, and government agencies to openly collaborate and share the latest information about emerging threats, attack methods, and malicious actors, promoting greater security across the entire community.
  • REScure Threat Intel Feed - REScure is an independent threat intelligence project which we undertook to enhance our understanding of distributed systems, their integration, the nature of threat intelligence and how to efficiently collect, store, consume, distribute it.

↑ OSINT Videos

↑ OSINT Blogs

↑ Other Resources

↑ Related Awesome Lists

License

cc license

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International license.

About

😱 A curated list of amazingly awesome OSINT

Topics

website osint awesome-list

Resources

Readme

License

View license
Activity

Stars

21.5k stars

Watchers

686 watching

Forks

3.1k forks
Report repository

Releases

No releases published

Packages

No packages published

Contributors 186

+ 172 contributors