Curated list of OSINT tools.
Curated list of open source intelligence tools and resources.
Open-source intelligence (OSINT) is intelligence collected from publicly available sources.
π General Search
The main search engines used by users.
π Main National Search Engines
Localized search engines by country.
π Meta Search
Lesser known and used search engines.
π Specialty Search Engines
Search engines for specific information or topics.
π Visual Search and Clustering Search Engines
Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.
- Carrot2 - Organizes your search results into topics.
- Yippy - Search using multiple sources at once
π Similar Sites Search
Find websites that are similar. Good for business competition research.
π Document and Slides Search
Search for data located on PDFs, Word documents, presentation slides, and more.
π Pastebins
Find information that has been uploaded to Pastebin & alternative pastebin-type sites
π Code Search
Search by website source code
- AnalyzeID - Find Other Websites Owned By The Same Person
- NerdyData - Search engine for source code.
- SearchCode - Help find real world examples of functions, APIs and libraries across 10+ sources.
π Major Social Networks
π Real-Time Search, Social Media Search, and General Social Media Tools
Social Media Tools
π Twitter
π Facebook
π Instagram
π Pinterest
π Reddit
Tools to help discover more about a reddit user or subreddit.
π VKontakte
Perform various OSINT on Russian social media site VKontakte.
π Tumblr
π LinkedIn
- FTL - Browser plugin that finds emails of peoples profiles in LinkedIn.
π Telegram
- Telegago - A Google Advanced Search specifically for finding public and private Telegram Channels and Chatrooms.
π Blog Search
π Forums and Discussion Boards Search
π Username Check
π People Investigations
- 411 (US) - Search by person, phone number, address, and business. Limited free info, premium data upsell.
- 192 (UK) - Search by person, business, address. Limited free info, premium data upsell.
- Ancestry - Premium data, free trial with credit card.
- Black Book Online - Free. Nationwide directory of public record lookups.
- Canada411 - Search by person, phone number, and business. Free.
- Classmates - High-school focused people search. Free acounts allow creating a profile and viewing other members. Premium account required to contact other members.
- CrunchBase - Business information database, with a focus on investment, acquisition, and executive data. Ancillary focus on market research and connecting founders and investors.
- facesearch - Handy proxy to search Google face-only image search results.
- Family Search - Popular genealogy site. Free, but registration requried. Funded by The Church Of Jesus Christ of Latter-day Saints.
- Federal Bureau of Prisons - Inmate Locator (US) - Search federal inmates incarcerated from 1982 to the present.
- Fold3 (US Military Records) - Search military records. Search filters limited with free access. Premium access requires subscription.
- Genealogy Bank - Premium data, free trial with credit card.
- Genealogy Links - Genealogy directory with over 50K links.
- Homemetry - Reverse address search and allows searching for properties for sale/rent.
- Judyrecords - Free. Nationwide search of 400 million+ United States court cases.
- Kompass - Business directory and search.
- My Life People Search - People search. Limited free info, premium data upsell.
- The National Archives (UK) - Search UK national archives.
- Reunion - People search. Limited free info, premium data upsell.
- SearchBug - People search. Limited free info, premium data upsell.
- Spokeo - People search. Limited free info, premium data upsell.
- UniCourt - Limited free searches, premium data upsell. Nationwide search of 100 million+ United States court cases.
- White Pages (US) - People search. Limited free info, premium data upsell.
π E-mail Search / E-mail Check
π Phone Number Research
- National Cellular Directory - was created to help people research and reconnect with one another by performing cell phone lookups. The lookup products includes have billions of records that can be accessed at any time, as well as free searches one hour a day, every day.
- Reverse Phone Lookup - Detailed information about phone carrier, region, service provider, and switch information.
- Spy Dialer - Get the voicemail of a cell phone & owner name lookup.
- Twilio - Look up a phone numbers carrier type, location, etc.
- Phone Validator - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
- PhoneInfoga - Advanced information gathering & OSINT framework for phone numbers
π Expert Search
π Company Research
π Job Search Resources
π Q&A Sites
π Domain and IP Research
- Accuranker
- ahrefs - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
- Alexa
- Bing Webmaster Tools
- BuiltWith
- Central Ops
- Dedicated or Not
- DNSDumpster
- DNS History
- DNSStuff
- DNSViz
- Domain Big Data
- Domain Crawler
- Domain Dossier
- Domain History
- Domain Tools - Whois lookup and domain/ip historical data.
- Easy whois
- Exonera Tor - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
- Follow.net
- GraphyStories
- HypeStat
- Infosniper
- intoDNS
- IP Checking
- IP Location
- IP 2 Geolocation
- IP 2 Location
- IPFingerprints
- IPVoid - IP address toolset.
- IntelliTamper
- Kloth
- NetworkTools
- Majestic
- MaxMind
- MXToolbox - MX record lookup tool.
- Netcraft Site Report
- OpenLinkProfiler
- Open Site Explorer
- PageGlimpse
- Pentest-Tools.com
- PhishStats
- Pulsedive
- Quantcast
- Quick Sprout
- RedirectDetective
- Remote DNS Lookup
- Robtex
- Spyse - Scans entire internet using OSINT and collects all valuable info in its own database: Ipv4 hosts, domains/Meta/Whois, AS, TLS/SSL, Ports/Banners/Protocols, technologies, OS and much other info.
- SameID
- SecurityTrails - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
- SEMrush
- SEO Chat Tools
- SEOTools for Excel
- Similar Web - Compare any website traffic statistics & analytics.
- SmallSEOTools
- StatsCrop
- Squatm3gator - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
- TCPIPUTILS.com
- urlQuery
- URLVoid - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
- Wappalyzer
- WebMeUp
- Website Informer
- WhatIsMyIPAddress
- Who.is - Domain whois information.
- Whois Arin Online
- WhoIsHostingThis
- WhoisMind
- Whoisology
- WhoIsRequest
- w3snoop
- Verisign
- ViewDNS.info
- You Get Signal
π Keywords Discovery and Research
π Web History and Website Capture
π Language Tools
π Image Search
π Image Analysis
π Stock Images
π Video Search and Other Video Tools
π Radio and Podcasts Tools
π Academic Resources and Grey Literature
π Books and Reading
π Geospatial Research and Mapping Tools
π News
π News Digest and Discovery Tools
π Fact Checking
π Data and Statistics
π Web Monitoring
π Bookmarking
π Startpages
π Browsers
π Offline Browsing
π VPN Services
π Note-taking
π Annotation Tools
π Writing and Office Tools
π Slide Show and Presentation Tools
π Digital Publishing
π Newsletter Tools
π Digital Storytelling
π Infographics and Data Visualization
π Image and Photo Editing
π Productivity Tools
π E-mail Management
π Document and Reference Management
π PDF Management
π OCR Tools
π Cloud Storage and File Sharing
π Web Automation
π Dashboard Tools
π Wikis
π Collaboration and Project Management
π Communication Tools
π Calendars and Scheduling
π Mind Mapping, Concept Mapping and Idea Generation Tools
π Social Network Analysis
π Privacy and Encryption Tools
π DNS
- Amass - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
- findsubdomains - Automatically scans different sources to collect as many subdomains as can. Validate all the data through various tools and services to provide correct results without waiting.
π Other Tools
- Barcode Reader - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
- Belati - Belati - The Traditional Swiss Army Knife For OSINT. Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose.
- Datasploit - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
- Greynoise - "Anti-Threat Intelligence" Greynoise characterizes the background noise of the internet, so the user can focus on what is actually important.
- The Harvester - Gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
- Intrigue Core - Framework for attack surface discovery.
- Maltego - Maltego is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
- OpenRefine - Free & open source power tool for working with messy data and improving it.
- Orbit - Draws relationships between crypto wallets with recursive crawling of transaction history.
- OSINT Framework - Web based framework for OSINT.
- OsintStalker - Python script for Facebook and geolocation OSINT.
- Outwit - Find, grab and organize all kinds of data and media from online sources.
- eScraper - Grab product descriptions, prices, image
urls and other data effortlessly
- Photon - Crawler designed for OSINT
- Pown Recon - Target reconnaissance framework powered by graph theory.
- QuickCode - Python and R data analysis environment.
- SecApps Recon - Information gathering and target reconnaissance tool and UI.
- sn0int - Semi-automatic OSINT framework and package manager.
- Zen - Find email addresses of Github users
π Threat Intelligence
- REScure Threat Intel Feed - REScure is an independent threat intelligence project which we undertook to enhance our understanding of distributed systems, their integration, the nature of threat intelligence and how to efficiently collect, store, consume, distribute it.
- OTX AlienVault - Open Threat Exchange is the neighborhood watch of the global intelligence community. It enables private companies, independent security researchers, and government agencies to openly collaborate and share the latest information about emerging threats, attack methods, and malicious actors, promoting greater security across the entire community.
- OnionScan - Free and open source tool for investigating the Dark Web. Its main goal is to help researchers and investigators monitor and track Dark Web sites.
- Digital Stakeout - DigitalStakeout Scoutβ’ is the leading security intelligence tool to collect data from the surface web, social media, dark web and technical sources to illuminate and investigate external threats.
π OSINT Videos