Awesome OSINT 
A curated list of amazingly awesome open source intelligence tools and resources.
Open-source intelligence (OSINT) is intelligence collected from publicly available sources.
In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources).
This list is to help all of those who are into Cyber Threat Intellience (CTI), threat hunting, or OSINT. From beginners to advanced.
Happy hacking and hunting 🧙♂️
📖 Table of Contents
↑ Contributing
Please read CONTRIBUTING if you wish to add tools or resources. Feel free to help 🥰 us grow this list with great resources.
↑ Credits
This list was taken partially taken from i-inteligence's OSINT Tools and Resources Handbook.
Thanks to our main contributors
jivoi EK_ &
spmedia
↑ General Search
The main search engines used by users.
- Aol - The web for America.
- Bing - Microsoft´s search engine.
- Brave - a private, independent, and transparent search engine.
- Goodsearch - a search engine for shopping deals online.
- Google Search - Most popular search engine.
- Instya - You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
- Lycos - A search engine for pictures, videos, news and products.
- Mojeek - A growing independent search engine which does not track you.
- Perplexity - AI-powered search engine with source citations.
- Phind - AI search engine optimized for developers and technical questions.
- Search.com - Search the Web by searching the best engines from one place.
- Wolfram Alpha - Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough
algorithms, knowledgebase and AI technology.
- Yahoo! Search - The search engine that helps you find exactly what you're looking for.
- YOU - AI search engine.
Google Dorks Tools
- AtDork - Professional OSINT dorking tool featuring adaptive delay, circuit breaker, and automatic backend fallback to avoid IP bans and rate limits.
- DorkGenius - DorkGenius is the ultimate tool for generating custom search queries for Google, Bing, and DuckDuckGo. - Our cutting-edge app uses the power of AI to help you create advanced search queries that can find exactly what you're looking for on the web.
- DorkGPT - Generate Google Dorks with AI.
- Google Hacking Database (GHDB) - The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.
- SearchDorks - Generate Search Engine (Google, FOFA, Shodan, Censys, ZoomEye) Dorks using AI.
↑ Main National Search Engines
Localized search engines by country.
Lesser known and used search engines.
↑ Privacy Focused Search Engines
Search engines that focuses on anonymization,privacy.
- DuckDuckGo - an Internet search engine that emphasizes protecting searchers' privacy.
- Disconnect Search - Stop search engines from tracking your searches.
- Gibiru - Gibiru provides “uncensored search results” without collecting personal data like logging users’ IP addresses or search queries.
- Kagi Search - Liberate your search. Free of ads. Free of surveillance. Your time respected. You are the customer, never the product.
- Mojeek - Mojeek is a growing independent search engine which does not track you.
- Presearch - Presearch is a decentralized, community-driven search engine that protects your privacy and rewards you when you search.
- Qwant - The search engine that respects your privacy.
- Startpage - The world’s most private search engine.
- SearXNG - A privacy-respecting, open-source metasearch engine.
- swisscows - Anonymous search engine, a family-friendly, privacy-focused search engine based in Switzerland.
↑ Data Breach Search Engines
Search engines that can be used to check if your data's been breached
- CheckLeaked - Check if an email, username or phone appears in a data breach, showing the sources; free searches, developer API and chat bots.
- CredenShow - Identify your compromised credentials before others do.
- HIB Ransomed - Because people have the right to know if their data has been leaked.
- HEROIC.NOW - Has your data been leaked on the dark web? Scan your identities for FREE.
- IKnowYour.Dad - Data Breach Search Engine.
- Leaker - Passive leak enumeration CLI tool that searches across 10 breach databases simultaneously.
- NOX - Recursive async framework for deep breach analysis and identity pivoting.
- OsintCat - Check if an email address has been exposed in known data breaches. Fast lookup across multiple breach databases, with a simple API available.
- StealSeek - Powerful search engine designed to help you find and analyze data breaches.
- Venacus - Search for your data breaches and get notified when your data is compromised.
↑ Speciality Search Engines
Search engines for specific information or topics.
- 2lingual Search
- Abusech - Hunt across all abuse.ch platforms with one simple query
- Abuseipdb - Repository of abuses reported by system administrators for IPs, Domains, and subnets
- BeVigil - Search for assets like Subdomains, URLs, Parameters in mobile applications
- BGP.tools - Modern BGP toolkit for network reconnaissance and analysis.
- BGP.he.net - Free BGP and network intelligence toolkit
- Biznar
- BrightCloud - Checks the reputation, category, and potential threats associated with a URL or IP address.
- Browserleaks - BrowserLeaks tests your browser for privacy and fingerprinting leaks
- Censys - Searcher that monitors and analyzes devices.
- CertKit Certificate Search - Fast search for public SSL/TLS certificate records.
- Cisco Talos Intelligence - IP and Domain Reputation Center for real-time threat detection
- CiteSeerX
- Cloudflare Radar - Internet traffic patterns, attacks, and technology trends.
- Criminal IP - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
- CRT Certificate Search - Allows you to search for public SSL/TLS certificates recorded in Certificate Transparency logs
- FOFA - Asset search and analysis tool.
- FullHunt -FullHunt identifies and secures your External Attack Surface.
- Google Custom Search
↑ Dark Web Search Engines
↑ Visual Search and Clustering Search Engines
Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.
↑ Similar Sites Search
Find websites that are similar. Good for business competition research.
- SimilarSites - Discover websites that are similar to each other
- SitesLike - Find similar websites by category
↑ Document and Slides Search
Search for data located on PDFs, Word documents, presentation slides, and more.
↑ Threat Actor Search
Search for Threat actors and their associated information.
- APT Groups and Operations - Know about Threat Actors, sponsored countries, their tools, methods, etc.
- Bi.Zone - 148 threat groups with detailed TTPs.
- BreachHQ - Provides a list of all known cyber threat actors also referred to as malicious actors, APT groups or hackers.
- Dark Web Informer - Tracking 854 Threat Actors as of 29th of May 2025.
- ETDA - Search for Threat Actor groups and their tools.
- FortiGuard Labs - Powered by FortiGuard Labs, our Threat Actor Encyclopedia provides actionable insights, helping security teams prepare and streamline advanced threat hunting and response.
- KNOWLEDGENOW - Trending Threats.
- lazarusholic - Total 203 threat actors.
- Malpedia - Get List of threat actor groups.
- MISP Galaxy - Known or estimated adversary groups as identified by 360.net.
- OPENHUNTING.IO - Threat Library Collecting Information.
- SOCRadar LABS - Know threat actor tactics, techniques, and past activities. Access detailed profiles and track their activities.Keep up with the latest threats and Tactics, Techniques, and Procedures (TTPs).
- Thales - Find Threat actor groups in a graphical attack explorer.
- Threat Actor Usernames Scrape - A collection of fresh intel and 900k+ threat actor usernames scraped from various cybercrime sources & forums.
↑ Live Cyber Threat Maps
Live Cyber Threat Maps helps to know attacks carried out in visualized format.
- Bitdefender Threat Map - Cyberthreat Real Time Map by Bitdefender.
- BunkerWeb Live Cyber Attack Threat Map - Live cyber attack blocked by BunkerWeb, the open source and next generation Web Application Firewall.
- Check Point Live Cyber Threat Map - Explore the top cyber threats of 2025, including ransomware, infostealers, and cloud vulnerabilities.
- Cisco Talos Intelligence -
- Fortiguard Labs - FortiGuard Outbreak Alerts provides key information about on-going cybersecurity attack with significant ramifications affecting numerous companies, organizations and industries.
- HCL Threat Map - Cyber Threat Map by HCLTech.
- IBM X-Force Exchange Current Malicious Activity -
- Imperva Live Threat Map - A real-time global view of DDoS attacks, hacking attempts, and bot assaults mitigated by Imperva security services.
- Kaspersky Cyberthreat live Map - Find out if you are under cyber-attack here.
- LIONIC Cyber Threat Map -
- NETSCOUT Cyber Threat Map - Real-Time DDoS Attack Map
- Radware Live Cyber Threat Map - Radware's Live Threat Map presents near real-time information about cyberattacks as they occur, based on our global threat deception network.
- Secure Gateway Live Cyber Threat Map -
- Thale's Cyberthreat Map - Discover cybersecurity trends with Thales' Cyberthreat map. Explore targeted areas, frequent attacks, affected sectors, and prevalent malware.
- ThreatsEye | Live Cyber Threat Map - Real-time visualization of global cyber attacks and threats. Monitor live cyber security incidents, attack origins, targets, and threat categories worldwide.
↑ File Search
Search for all kind of files.
- eyedex - Open directory search engine.
- de digger - is a website that allows you to find any types of files that are publicly available in a Google Drive.
- Filesec.io - Central resource cataloging malicious file extensions, their risks, OS and mitigations.
- [Find Security Contacts] https://findsecuritycontacts.com - Public index listing security contacts (emails, policies, etc.) extracted from domains security.txt files.
- Meawfy - Advanced Mega.nz File Search Engine. Search and discover files from Mega.nz with our intelligent crawler technology. Access over 9 million indexed files instantly.
- NAPALM FTP Indexer
- ODCrawler - A search engine for open directories. Find millions of publicly available files!
- SearchFiles.de
↑ Pastebins
Find information that has been uploaded to Pastebin & alternative pastebin-type sites
- BeanPaste - A tiny way to share text.
- bpaste - Welcome to bpaste, this site is a pastebin. It allows you to share code with others.
- CentOS Pastebin Service - Stikked is an Open-Source PHP Pastebin, with the aim of keeping a simple and easy to use user interface.
- cl1p - The Internet Clipboard.
- commie - commie is a pastebin script with line commenting support.
- Context - Share whatever you see with others in seconds.
- ControlC Pastebin - The easiest way to host your text.
- Cutapaste - Short Code and Share.
- Defuse - Encrypted Pastebin - Keep your data private and secure!
- doxbin - A dox style pastebin ran by hackers.
- dpaste
- Etusivu - It's an open source clone of pastebin.com. Default Language is Finnish.
- Friendpaste - Paste stuff to your friends.
- GitHub gist
- HashBin - HashBin is a paste bin that never sees the contents of its pastes.
- hastebin
- ideone
- ivpaste
- jsbin
- justpaste
- Katbin - Small, lightweight pastebin.
- Linkode(alpha) - Linkode is the useful pastebin!
- Logpasta - Simple, secure log paste service. Command line mode based.
↑ Code Search
Search by website source code
- AnalyzeID - Find Other Websites Owned By The Same Person
- Code Finder - The ultimate search engine for finding GitHub repositories
- GitHub Code Search - GitHub's enhanced code search with advanced filtering.
- grep.app - Searches code from the entire github public repositories for a given specific string or using regular expression.
- NerdyData - Search engine for source code.
- PublicWWW
- Reposearch
- SearchCode - Help find real world examples of functions, API's and libraries across 10+ sources.
- Sourcebot - Index thousands of repos on your machine and search through them in a fast, powerful, and modern web interface.
- SourceGraph - Search code from millions of open source repositories.
↑ Major Social Networks
↑ Facebook
↑ Instagram
- Dolphin Radar - An Instagram Post Viewer lets you view posts, stories, and profiles from public accounts with ease. Free viewer limit: 1.
- Iconosquare
- instagram_monitor - Tool for real-time tracking of Instagram users' activities and profile changes with support for email alerts, CSV logging, showing media in the terminal, anonymous story downloads and more
- InstagramPrivSniffer - Views Instagram PRIVATE ACCOUNT'S media without login 😱.
- insto - Interactive OSINT CLI / REPL with 35+ slash-commands: profile + media + followers + dossier + geo-fingerprint (
/where), shared-followers intersection (/intersect), superfan ranking (/fans), location search (/place), URL→metadata resolution (/postinfo), posting-cadence histogram (/timeline), Maltego CSV export. Token-based (HikerAPI, no IG account needed → no ban risk) with optional logged-in aiograpi backend.
- Osintgram - Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname.
- Osintgraph - Tool that maps your target’s Instagram data and relationships in Neo4j for social network analysis.
↑ TikTok
↑ Pinterest
↑ Reddit
Tools to help discover more about a reddit user or subreddit.
- Arctic Shift - A tool for accessing and interacting with large dumps of Reddit data, offering an API and web interface for research and moderation purposes.
- Imgur - The most popular image hosting website used by redditors.
- Mostly Harmless - Mostly Harmless looks up the page you are currently viewing to see if it has been submitted to reddit.
- Pushshift API - A powerful API that provides access to historical Reddit data, including posts, comments, and metadata for analysis and research—more information here.
- Pullpush - PullPush is a service for the indexing and retrieval of content that Reddit users have submitted to Reddit. Helpful for finding deleted/removed posts & comments.
- REDARCS - Reddit archives 2005-2023.
- Reddit Archive - Historical archives of reddit posts.
- Reddit Suite - Enhances your reddit experience.
- Reddit User Analyser - reddit user account analyzer.
- RedditMetis - RedditMetis is a Reddit user analysis tool to see the summary and statistics for a Reddit account, including top posts and user activity etc.
- Subreddits - Discover new subreddits.
- Reddit Comment Search - Analyze a reddit users by comment history.
- Universal Scammer List - This acts as the website-portion for the subreddit /r/universalscammerlist. That subreddit, in conjuction with this website and a reddit bot, manages a list of malicious reddit accounts and minimizes the damage they can deal. This list is referred to as the "USL" for short.
- Reddit Comment Lookup - Search for reddit comments by reddit username.
↑ VKontakte
Perform various OSINT on Russian social media site VKontakte.
↑ WhatsApp
*2Chat - Check if a number is on WhatsApp.
*Groupio - Find and search WhatsApp groups.
*Whatsapp CheckLeaked - WhatsApp Number Search & Profile Photo Checker. API Option Available.
↑ Tumblr
↑ LinkedIn
- the-endorser - Tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
- LinkedInDumper - Script to dump/scrape/extract company employees info from LinkedIn API.
↑ Telegram
- CCTV - Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings.
- GroupDa - Can be used for Searching Telegram Channels. Search by Category, Countries and Language.
- Maltego Telegram - Rich Set of Entities & Transforms for OSINT on Telegram with Maltego.
- Telegram Finder - A tool to find Telegram users by their phone number, linkedin url or email.
- Telerecon - A reconnaissance framework for researching and investigating Telegram.
- TgramSearch - Convenient search for Telegram channels, as well as a structured catalog with over 700000 Telegram channels. Available in 8+ Languages.
- tgworld - The Global Search System TG.World will help you find Channels, Groups and Bots in Telegram in any language and for any country in the world!
- Telegram Channel Joiner - grow your Free and Premium Telegram accounts easily with this channel joiner script.
- Telepahty - Telepathy is a tool that archives Telegram chats and analyzes communication patterns within the app. By providing insights into user interactions, message frequency, and content trends, Telepathy helps investigators understand the dynamics and relationships within Telegram groups and channels.
- Teleteg - The ultimate Telegram search engine. 10 results for free plan.
- Telegago - A Google Advanced Search specifically for finding public and private Telegram Channels and Chatrooms.
- Telegram Nearby Map - Webapp based on OpenStreetMap and the official Telegram library to find the position of nearby users.
- Telegram channels scraper TeleGraphite - Telegram Scraper & JSON Exporter & telegram channels scraper.
Telegram Bots
- AgentFNS_Bot — Free instant counterparty check using official data (INN/OGRN).
- AVinfoBot — Used-car history via plate/VIN/phone.
- AvtoNomer — Finds vehicle photos by plate via platesmania.com.
- avtogram_bot — Paid car reports (VIN/plate): accidents, fines, liens.
- avtocodbot — Paid VIN/plate lookup.
- bmi_np_bot — Identifies phone-number operator and basic info.
- ChatSearchRobot — Finds chats with similar topics; 709k+ VK chats.
- ClerkBot — Phone + username lookup; vehicle info.
- creationdatebot — Approx. Telegram account creation date.
- CryptoBot — Anonymous crypto wallet.
- datXpert — Leak search via IntelX.
- Detectiva — Phone/email lookup with 6 search types.
- Discord Sensor — Retrieves Discord account data.
- dCallsBot — Anonymous calls, masking, eSIM/DID.
- EasyVIN — Cheap VIN/plate history check.
- egrul_bot — Free counterparty-check bot.
- EyeTON — TON wallet graph + linked profiles.
- FindStickerCreator — Finds creator of any Telegram sticker pack.
- Фари — VIN-history lookup from getcar.by.
- GeoMacFinder — Finds Wi-Fi AP location by MAC/BSSID.
- getChatList — Shows user’s group list.
↑ Steam
-
OSINT-Steam - An open-source tool that returns public information, such as friends list and possible locations, from Steam profiles.
-
Steam-OSINT - Open-source OSINT tool for accurate mutual friends analysis on Steam, supporting full friend lists.
↑ GitHub
- GHNames - GitHub lookup tool to search for username history, associated emails, and deleted repositories.
- github_monitor - Tool for real-time tracking of GitHub users' activities including profile and repository changes with support for email alerts, CSV logging, detection when a user blocks or unblocks you and more
- GithubRecon - Lookup Github users by username or email and gather associated data.
- GitLeak - An OSINT tool for GitHub that extracts hidden email addresses, commit timezones, and activity patterns via .patch metadata.
- Related Repos - Discover related open source projects. Find alternatives and other similar repositories. Updated daily.
- Shotstars - An advanced tool for checking GitHub repositories, with star statistics, including fake star analysis and data visualization.
↑ Blog Search
↑ Forums and Discussion Boards Search
↑ Username Check
- Antisocial - Find forgotten accounts across 30+ platforms using three-tier verification: official APIs first, then browser automation, then HTTP content analysis. Reduces false positives to around 5%. Deep search mode adds 500+ platforms via the WhatsMyName database.
- Blackbird - Search a username across over 600+ websites.
- CheckUser - search username across social networks
- Cupidcr4wl - Username and phone number search tool that crawls adult content platforms to see if a targeted account or person is present.
- Digital Footprint Check - Check for registered username on 100s of sites for free.
- IDCrawl - Search for a username in popular social networks.
- Maigret - Collect a dossier on a person by username.
- Name Chk - Check over 30 domains and more than 90 social media account platforms.
- Name Checkr - checks a domain and username across many platforms.
- Name Checkup - is a search tool that allows you to check the avilability of a givrn username from all over the social media. Inaddition it also sllows you to check the avilability of a given domain name.
- NameKetchup - checks domain name and username in popular social media sites and platforms.
- NexFil - checks username from almost all social network sites.
- Seekr A multi-purpose all in one toolkit for gathering and managing OSINT-Data with a neat web-interface. Can be used for note taking and username checking.
- Sherlock - Search for a username in multiple platforms/websites.
- SherlockEye - Search for publicly available information connected to a username, uncovering associated profiles and activities across the web.
↑ People Investigations
- 192 (UK) - Search by person, business, address. Limited free info, premium data upsell.
- 411 (US) - Search by person, phone number, address, and business. Limited free info, premium data upsell.
- Ancestry - Premium data, free trial with credit card.
- Apollo.io - Free B2B Phone Number & Email Finder. 1200 credits per user/year for free plan.
- BeenVerified
- Black Book Online - Free. Nationwide directory of public record lookups.
- BuscaPaginasBlancas - OSINT tool for extracting contact information from Spanish white pages (Paginas Blancas).
- California Justice Watch - Free. Public-records accountability data for California: 58 district attorneys, 196 public defenders, 1,620 sitting judges, 1,500 law-enforcement officers with documented misconduct, 247 Commission on Judicial Performance discipline records (plus full-text search over 250 CJP decision PDFs), and 671 POST decertifications. Open API + MCP server.
- Canada411 - Search by person, phone number, and business. Free.
- Classmates - High-school focused people search. Free acounts allow creating a profile and viewing other members. Premium account required to contact other members.
- ContactOut - Unlock the world's most accurate contact data. Find emails & phone for 300M professionals.
- Clustermaps - Find people and address information associated with them
- CrunchBase - Business information database, with a focus on investment, acquisition, and executive data. Ancillary focus on market research and connecting founders and investors.
- FaceCheck.ID - Search the internet by face.
- Family Search - Popular genealogy site. Free, but registration required. Funded by The Church Of Jesus Christ of Latter-day Saints.
↑ Email Search / Email Check
- Blackbird - Search for accounts associated with a given email across various platforms.
- Blacklist Checker - Blacklist Checker is an email blacklist checker, monitor and API that checks 100+ blacklists in seconds
- DeHashed - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the world’s largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise.
- Email Address Validator - Improve deliverability, reduce bounce rates, prevent fraud and minimize funnel leaks.
- Email Extractor - A browser-based utility to quickly extract email addresses from bulk text or raw data for further investigation.
- Email Format - is a website that allows you to find email address formats used by different companies.
- Email Permutator - a powerful tool designed to aid professionals in generating a range of potential email addresses for a specific contact.
- EmailHippo - is an email address verification platform that will check whether a given email address exists or not.
- EmailRep - Email address reputation and risk scoring service.
- Epieos Tools - Collection of OSINT tools for email investigations.
- Ghunt - Investigate Google emails and documents.
- Gitrecon - Node.js tool to scan GitHub repositories for exposed email addresses and names.
- h8mail - Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email.
- Have I Been Pwned - Search across multiple data breaches to see if your email address has been compromised.
- - allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
↑ Phone Number Research
- EmobileTracker.com - a service specifically designed to Track Mobile Number, Location on Google Map including information such as the owner's Name,Location,Country,Telecom provider.
- FreeCarrierLookup - enter a phone number and we'll return the carrier name and whether the number is wireless or landline. We also return the email-to-SMS and email-to-MMS gateway addresses for USA and Canadian* phone numbers.
- Infobel - Search 164+ million records across 73 countries for companies and individuals. Find places, local service providers, their contact details, reviews, opening hours and more.
- InMobPrefix - Dataset, charts, models about mobile phone numbers prefixes in India along with their respective state, operator.
- Phone Validator - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
- PhoneInfoga - Advanced information gathering & OSINT framework for phone numbers.
- Reverse Phone Check - Look up names, addresses, phone numbers, or emails and anonymously discover information about yourself, family, friends, or old schoolmates. Powered by infotracer.com
- Reverse Phone Lookup - Detailed information about phone carrier, region, service provider, and switch information.
- SearchPeopleFREE - a reverse name, address, email address, or phone lookup that allows you to discover the owner of a phone number or who lives at an address.
- Spy Dialer - Get the voicemail of a cell phone & owner name lookup.
- Sync.ME - a caller ID and spam blocker app.
- Truecaller - Global reverse phone number search.
- Twilio - Look up a phone numbers carrier type, location, etc. Twilio offers free accounts that come with credits you can use with their API. Each lookup is only ~$0.01-$0.02 typically on US and CAN numbers.
- - Reverse phone and address lookups and leading data.
↑ Vehicle / Automobile Research
- FaxVIN - Vehicle History Reports. A license plate lookup tool that returns info like VIN, make & model of vehicle, age, and numerous other details.
- EpicVIN - Vehicle reports are compiled from various data sources, including historical accident records from state agencies and other entities like NMVTIS. License plate lookup that returns VIN and car millage.
↑ Expert Search
↑ Company Research
↑ Job Search Resources
↑ Q&A Sites
↑ Domain and IP Research
- aa419 Fake Sites Database - The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
- Accuranker
- ahrefs - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
- Argos OSINT - Free Spanish-language OSINT platform: 31 client-side tools + 7 step-by-step guides + 10 curated OSINT prompts for Claude/LLM. Covers WHOIS/RDAP, DoH DNS, subdomain enumeration (crt.sh), unified domain dashboard, IP geolocation, IP reputation via Shodan InternetDB, email header analyzer (SPF/DKIM/DMARC), SPF/DMARC auditor, pwned password check via HIBP k-anonymity, EXIF and PDF metadata analyzers, reverse image search aggregator, Wayback lookup, username finder across 50+ platforms, WhatsApp chat analyzer, JWT decoder, regex/color/UA parser/QR/base64/hash/URL cleaner. No signup, PWA installable, all processing in-browser.
- Azure Tenant Resolution by PingCastle - Search for Azure Tenant using its domain name or its ID
- Bgpview.io - The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
- Bing Webmaster Tools
- Browserling - Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
- BuiltWith - is a website that will help you find out all the technologies used to build a particular websites.
- Central Ops
- Cerast Intelligence - Searchable archive of exposed panels and misconfigurations found across domains by continuous internet-wide scanning; look up the exposure findings on record for a given domain.
- CrawlGraph - Maps who links to any domain using the open Common Crawl hyperlink graph. Free, no-signup referring-domain and competitor link-footprint lookups for domain research.
- Crypto Scam & Crypto Phishing URL Threat Intel Feed - A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
↑ Keywords Discovery and Research
↑ Web History and Website Capture
↑ Image Search
- Baidu Images
- Betaface
- Bing Images
- Clarify
- Dupli Checker - You can search for an image by uploading + with URL or typing the keyword or any word you want to explore related to images.
- FaceCheck.ID - Facial recognition search engine.
- Faceagle - Faceagle is a face recognition search engine.
- Flickr
- GeoSpyer - Python tool using Graylark's AI-powered geo-location service to uncover the location where photos were taken.
- Google Image
- Google Lens
- Image Identification Project
- Image Raider - is our reverse image search tool for completing individual searches. When you upload an image to this page, we'll scour the internet to find its source and all of the other pages where it has been posted.
- KartaVision - search engine for KartaView imagery. It supports natural-language search and search by image
- Lenso.ai - Reverse image search tool with facial recognition, created for finding people, similar images, copies of photos, identical places and more.
- Lycos Image Search
- PhotoBucket
- PicTriev - a face search engine.
- PimEyes - an online face search engine that goes through the Internet to find pictures containing given faces.
- Pixsy - Take back control of your images. See where & how your images are being used online!
↑ Image Analysis
- Archivarix Tube Search - Search engine for finding deleted, removed, and unavailable YouTube videos.
- AudienceCue - Downloads the latest public YouTube video or Shorts comments as CSV for research workflows.
- Bing Videos
- Clarify
- Clip Blast
- DailyMotion
- Deturl - Download a YouTube video from any web page.
- DownloadHelper - Download any video from any websites, it just works!
- Earthcam - EarthCam is the leading network of live streaming webcams for tourism and entertainment.
- Filmot - Search within YouTube subtitles. Indexing over 573 million captions across 528 million videos and 45 million channels.
- Find YouTube Video - Searches currently 5 YouTube archives for specific videos by ID, which is really useful for finding deleted or private YouTube videos.
- Frame by Frame - Browser plugin that allows you to watch YouTube videos frame by frame.
- Geosearch
- Insecam - Live cameras directory
- Internet Archive: Open Source Videos
- Metacafe
- Metatube
- Tubuep - Downloads online videos via yt-dlp, then reuploads them to the Internet Archive for preservation. Note: if you would like to archive comments too, you need to install version 0.0.33 and use the --get-comments flag, however you will still have the new yt-dlp fixes and features, but existing tubeup bugs cannot be fixed, unless you do manual work.
↑ Academic Resources and Grey Literature
↑ News
↑ Fact Checking
↑ Data and Statistics
↑ Web Monitoring
↑ Browsers
↑ Offline Browsing
↑ VPN Services
↑ Infographics and Data Visualization
↑ Social Network Analysis
↑ DNS
- Amass - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
- Columbus Project - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
- dnsx - A fast and multi-purpose DNS toolkit from ProjectDiscovery for running DNS probes, resolving records and filtering DNS responses.
- Merklemap - Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Works by ingesting certificate transparency logs.
- Subhunt - Multi-source subdomain enumeration tool querying crt.sh Certificate Transparency logs, HackerTarget, and RapidDNS. Features HTTP/HTTPS liveness probing with status codes, alive/dead filtering, multi-format export (TXT/JSON/CSV), and a full CLI.
↑ Maritime
- Phantom Tide - Cross-domain OSINT dashboard combining vessel tracking, airspace activity, official notices, environmental context, and satellite detections for maritime and airspace analysis.
- VesselFinder - a FREE AIS vessel tracking web site. VesselFinder displays real time ship positions and marine traffic detected by global AIS network.
- aadinternals - Provides tools and insights for advanced analysis and security testing of Azure Active Directory (AAD) and Microsoft 365.
- ArkhamMirror - Local-first AI document intelligence with offline RAG, contradiction detection, knowledge graphs, and vision AI table extraction.
- Barcode Reader - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
- BeVigil-CLI - A unified command line interface and python library for using BeVigil OSINT API to search for assets such as subdomains, URLs, applications indexed from mobile applications.
- Cyberbro - A self-hosted application, available as a Dockerized, for effortless searching and reputation checking of observables. Extracts IoCs from raw input and check their reputation using multiple services.
- CyberGordon - CyberGordon is a threat intelligence search engine. It leverages 30+ sources.
- CrowdSec - An open source, free, and collaborative IPS/IDS software written in Go, able to analyze visitor behavior & provide an adapted response to all kinds of attacks.
- Datasploit - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
- Dehashed CLI - Command-line tool for searching breach databases via DeHashed API.
- Dorkgpt - Artificial intelligence that generates advanced search queries to find specific or hidden information on the internet.
- DuckDuckGo URL scraper - A simple DuckDuckGo URL scraper.
- FaviconHash - Generate favicon hashes of a website for use on Shodan, VirusTotal, Censys, ZoomEye or FOFA.
- Find osint tool - Searches multiple OSINT tools to find information across various sources.
- FOCA - Tool to find metadata and hidden information in the documents.
Read more
jivoi/awesome-osint
