Skip to main content

OSINT Tools

tip

Please click on the right sidebar → for accessing each section

OSINT Basics​

What is OSINT​

Open-source intelligence (OSINT) is data collected from publicly available sources to be used in an intelligence context. In the intelligence community, the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources). It is not related to open-source software or public intelligence.

What can we find with OSINT?​

  • Email addresses
  • Phone numbers
  • Addresses
  • Identities
  • Background checks
  • Social media accounts and information
  • Criminal records
  • Scams
  • Etc.

Who uses OSINT?​

  • Law enforcement
  • Security professionals
  • Malicious hackers
  • Investigators
  • Journalists

General OSINT Tools​

WebsiteDescription
MaltegoA comprehensive tool for link analysis and data mining.
TheHarvesterGathers emails, subdomains, hosts, employee names, open ports, and banners from various public sources.

Image OSINT​

WebsiteDescription
Pimeyes.comUpload photo and find out where images are published.
Exif.toolsA multimedia file metadata tool.
TinEyeReverse image search engine.
Google ImagesReverse image search using Google.

Email OSINT​

WebsiteDescription
Hunter.ioFind professional email addresses in seconds and connect with the people that matter for your business.
Phonebook.czLists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.
Voilanorbert.comFind anyone's email address.
emailhippo.comThe only email verification solution trusted by marketers, developers, and fraud fighters.
Emailrep.ioSimple Email Reputation search.
Clearbit ConnectSupercharge Gmail - Chrome extension.
haveibeenpwnedCheck if your email or phone is in a data breach.
Email HunterFind and verify email addresses.
SnusbaseDatabase search engine for data breaches.

Social Media OSINT​

WebsiteDescription
Lookup-id.comFind your Facebook profile ID, Group ID, or Page ID.
Facebook MatrixFormulas for Searching Facebook.
Facebook Graph SearcherFacebook Graph Searcher.
Facebook Graph, Codes & OperatorsFacebook Graph Search Operators.
TwintAdvanced Twitter scraping tool written in Python.
SociotalExtract data from various social media platforms.
Foller.meAnalyzes Twitter profiles.

Domain OSINT​

WebsiteDescription
AnalyzeIDFind other websites owned by the same person.
DomainIQView information on the ownership and status of any domain name or IP address.
ViewDNS InfoTools for gathering a large amount of data about a given website or IP address.
whoismindSearch any IP address.
DNS DumpsterDNS recon & research, find & lookup DNS records.
OSINT.SHAll-in-one information gathering tools.
whoxyWhois API, Whois History, Reverse Whois.
whoisologyMore than reverse Whois lookups.
Domain DossierInvestigate domains and IP addresses.
Wayback MachineBrowse the history of a website.
NetcraftProvides internet security services and research data.

Web Analytics​

WebsiteDescription
Built WithFind out what websites are built with.
Spy ON WebInformation from public sources structured for quick and convenient search for websites that likely belong to the same owner.

Online Tools​

WebsiteDescription
SSL LabsPerforms a deep analysis of the configuration of any SSL web server on the public internet.
Zoom EyeUses Xmap and Wmap at its core to collect data from open devices/web services and for fingerprint analysis.
CensysHelps information security practitioners discover, monitor, and analyze devices accessible from the internet.
Shodan.ioSearch engine for internet-connected devices.
DehashedHacked database search engine for security analysts, journalists, security companies, and everyday people.
XmindProfessional and popular mind mapping tool.
What UShows data that websites 'know' about you.
Spiderfoot HXAutomate OSINT for threat intelligence, asset discovery, attack surface monitoring, or security assessments.
TraceLabsCrowdsourcing OSINT to help find missing people.
IP 2 LocationFree IP geolocation query.
Grey NoiseCollects and analyzes untargeted, widespread, and opportunistic scan and attack activity.
Intelligence XPowerful search engine and data archive for darknet, document sharing platforms, public data leaks, etc.
ONYPHE.IOCyber defense search engine.
FOCAFinds metadata and hidden information in documents.
IPinfo.ioIP address information and geolocation.
MetagoofilExtracts metadata from public documents.

OSINT Frameworks​

WebsiteDescription
OSINT FrameworkA web-based framework for OSINT research.

Username OSINT​

WebsiteDescription
SherlockHunt down social media accounts by username across social networks.
Whats my nameEnumerates usernames across many websites.
KnowemSearch over 500 popular social networks, over 150 domain names, and the entire USPTO Trademark Database to instantly secure your brand on the internet.
namecheckrTool to research domain and social username availability.
user searchFind someone by username or email on social networks, dating sites, forums, chat sites, and blogs. 600+ sites supported.
Name vineInstantly find a domain name with matching social media profiles.
NamechkChecks the availability of usernames across multiple social media platforms.
UserReconUsername reconnaissance tool.

Vehicle OSINT​

WebsiteDescription
LICENSE PLATES OF THE WORLDLicense plates of the world.
nomerogram.ruFind a car by license plate for free (Russian).
uk.vin-infoFree VIN check/registration check of cars in the UK.

GitHub​

WebsiteDescription
MaryamOWASP Maryam is a modular open-source framework based on OSINT and data gathering.
GHuntGHunt is a modular OSINT tool designed to evolve over the years and incorporates many techniques to investigate Google accounts or objects.

Default Password sites​

WebsiteDescription
Default password sites 1Default router username and password list.
Default password sites 2Default router username and password list.
Default password sites 3Default router username and password list.

Dark Web OSINT​

WebsiteDescription
DarkSearchSearch engine for the dark web.
Tor BrowserBrowse the dark web anonymously.

Tools for Investigators​

WebsiteDescription
CaseFileTool for simpler link analysis.
Social LinksIntegrates with Maltego to provide data from social networks.