osint
OSINT automation for hackers. A recursive internet scanner for hackers.
BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon, Bug Bounties, and ASM!
The Ultimate Information Gathering Toolkit. A Python-based toolkit for Information Gathering and Reconnaissance.
Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. With a user-friendly interface and a suite of powerful modules, Argus empowers you to explore networks, web applications, and security configurations efficiently and effectively.
Uncover evidence of internet censorship worldwide. Open data collected by the global OONI community.
OONI Explorer is an open data resource on internet censorship around the world.
Since 2012, millions of network measurements have been collected from more than 200 countries. OONI Explorer sheds light on internet censorship and other forms of network interference worldwide.
This is your place to discover tools! Our toolkit includes satellite and mapping services, tools for verifying photos and videos, websites to archive web pages, and much more. Most of the tools that we include can be used for free.
Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain manually. Additionally, it seeks out information in unconventional places.
sunrise, sunset, shadow length, solar eclipse, sun position, sun phase, sun height, sun calculator, sun movement, map, sunlight phases, elevation, Photovoltaic system, Photovoltaic
Your online toolkit for Sun and Shadow. Simulate sun shadows for any time and place on Earth.
Simulate, visualize and analyze sunlight and shadow in any modern browser using your own terrain, real-estate, and vegetation data and share it on the web.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate.
SpiderFoot has an embedded web-server for providing a clean and intuitive web-based interface but can also be used completely via the command-line. It's written in Python 3 and MIT-licensed.
Conspiracy Watch, an independent French non-profit organization, is an open-source media analyzing, in real-time, disinformation and extremism (online) and combating its impact on democratic values (and human rights) worldwide.
Domain Public Data Collection Service.
DPULSE is a software solution for conducting OSINT research in relation to a certain domain.
Hunt down social media accounts by username across 400+ social networks.
Find and verify secrets. Find leaked credentials.
TruffleHog is the most powerful secrets Discovery, Classification, Validation, and Analysis tool. In this context secret refers to a credential a machine uses to authenticate itself to another machine. This includes API keys, database passwords, private encryption keys, and more...
Related contents:
Searching the TrashPanda OSINT bot API to check if your email/domain or password was leaked.
Useful tool to track location or mobile number.
Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks.
Emora allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results.
Cyber Theat live dashboard
Track your OSINT investigations
Osintracker is focused on OSINT investigations. It's a source-oriented application, primarily focused on keeping track of your online findings.
A tool to scrape LinkedIn without API restrictions for data reconnaissance.
This tool assists in performing reconnaissance using the LinkedIn.com website/API for red team or social engineering engagements. It performs a company specific search to extract a detailed list of employees who work for the target company. Enter the name of the target company and the tool will help determine the LinkedIn company ID, which will be used to perform the search.
An automated e-mail OSINT tool.
Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of information.
The World’s First Truly Open Threat Intelligence Community
The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
The OWASP Amass Project has developed a framework to help information security professionals perform network mapping of attack surfaces and external asset discovery using open source intelligence gathering and reconnaissance techniques.
Home of the Flight Tracking Community.
adsb.fi is a community-driven flight tracker, with over 1600 feeders around the world. We provide open and unfiltered access to worldwide air traffic data.
🕵️♂️ All-in-one OSINT tool for analysing any website. Comprehensive, on-demand open source intelligence for any website.
Get an insight into the inner-workings of a given website: uncover potential attack vectors, analyse server architecture, view security configurations, and learn what technologies a site is using.
Related contents:
Track C2 over time by framework and location.
C2Live is an open-source project aimed at providing a comprehensive and interactive platform for tracking Command and Control (C2) malicious IP addresses over time.
How would you like to jumpstart your Open Source Intelligence investigation?
MetaOSINT enables open source intelligence ("OSINT") practitioners to jumpstart their investigations by quickly identifying relevant, publicly-available tools and resources, saving valuable time during investigations, research, and analysis.
All-in-one website OSINT tool for analysing any website. Comprehensive, on-demand open source intelligence for any website.
Get an insight into the inner-workings of a given website: uncover potential attack vectors, analyse server architecture, view security configurations, and learn what technologies a site is using.
Currently the dashboard will show: IP info, SSL chain, DNS records, cookies, headers, domain info, search crawl rules, page map, server location, redirect ledger, open ports, traceroute, DNS security extensions, site performance, trackers, associated hostnames, carbon footprint. Stay tuned, as I'll add more soon!
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
Mine, merge, and map data for novel insights.
Open Source Intelligence. Fetch data from different sources and returns the results as visual entities that you can explore step-by-step.
GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily.
Storytelling, Data Journalism & Online Investigation - learn the basics of modern journalistic work with this new, immersive manual.
dns recon and research, find and lookup dns records.
DNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
This is a GUI for testing and developing queries for the Overpass-API. It can also used for simple analysis of OSM data.
OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get at least a portion of the available information for no cost.
Community Insights for GitHub repos. Discover useful insights about your open-source project. A free tool to learn about adoption, contributions, diversity and governance of your GitHub repo.
Face Recognition Search Engine and Reverse Image Search. Upload photo and find out where images are published.
WebOSINT is a Python script to gather (passive) domain intelligence.
This simple tool helps save a lot of time when gathering information about geolocation. Enter latitude and longitude (or choose location on map) once and click the buttons with the names of online maps, to quickly jump to it.
This simple tool helps save a lot of time when gathering information on social networks. Enter your search query once and click the buttons with the names of social media platforms, to quickly jump to pages to find posts that match your query. Quick hastags search @ GitHub.
🐙 Track down GitHub users. GitFive is an OSINT tool to investigate GitHub profiles.
OSINT Community Open Source Intelligence. OSINT-FR is a global community, gathering experts and learners, willing to develop their knowledge on open source intelligence techniques.
La plateforme communautaire dédiée à l'OSINT. Plateforme dédiée à la pratique de l'Osint.
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function. Efficiently finding registered accounts from emails. Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.
Search Engine for the Internet of Everything Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions.
An OSINT tool to search for accounts by username in social networks. An OSINT tool to search fast for accounts by username across 574 sites.
Certificate Search Enter an Identity (Domain Name, Organization Name, etc), a Certificate Fingerprint (SHA-1 or SHA-256) or a crt.sh ID.
Open Food Facts is a food products database made by everyone, for everyone. You can use it to make better food choices, and as it is open data, anyone can re-use it for any purpose.
Related contents:
Investigate 12x faster with the world's most used cyber investigation platform