OSINT Tools
tip
Please click on the right sidebar → for accessing each section
Image OSINT
| Plugin | README |
|---|---|
| Pimeyes.com | UPLOAD PHOTO AND FIND OUT WHERE IMAGES ARE PUBLISHED |
| Exif.tools | A multimedia file metadata tool |
Email OSINT
| Plugin | README |
|---|---|
| Hunter.io | Hunter lets you find professional email addresses in seconds and connect with the people that matter for your business. |
| Phonebook.cz | Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.You are searching 88 billion records. |
| Voilanorbert.com | You can find anyone's email address |
| emailhippo.com | The only email verification solution trusted by marketers, developers and fraud fighters. |
| Emailrep.io | Simple Email Reputation search |
| Clearbit Connect | Supercharge Gmail - chrome extension |
| haveibeenpwned | Check if your email or phone is in a data breach |
Facebook OSINT
| Plugin | README |
|---|---|
| Lookup-id.com | Looking for your Facebook profile ID / Group ID / Page ID ... |
| Facebook Matrix | Formulas for Searching Facebook |
| Facebook Graph Searcher | Facebook Graph Searcher |
| Facebook Graph, Codes & Operators | Facebook Graph Search Operators |
Domain OSINT
| Plugin | README |
|---|---|
| AnalyzeID | Find Other Websites Owned By The Same Person |
| DomainIQ | Enter any domain name or IP address to view information on its ownership and status. |
| ViewDNS Info | The tools provided by ViewDNS.info allow users to gather a large amount of data about a given website or IP address. |
| whoismind | Search any IP Address |
| DNS Dumpster | dns recon & research, find & lookup dns records |
| OSINT.SH | ALL IN ONE INFORMATION GATHERING TOOLS |
| whoxy | Whois API / Whois History / Reverse Whois |
| whoisology | More Than Reverse Whois Lookups |
Web Analytics
| Plugin | README |
|---|---|
| Built With | Find out what websites are Built With |
| Spy ON Web | We take the information from public sources, then structure it for your quick and convenient search for the websites that probably belong to the same owner. |
Online Tools
| Plugin | README |
|---|---|
| SSL Labs | This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. |
| Zoom Eye | ZoomEye uses Xmap and Wmap at its core to collect data from open devices / web services and for fingerprint analysis |
| Censys | Censys is a platform that helps information security practitioners discover, monitor, and analyze devices that are accessible from the Internet |
| Shodan.io | Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions. |
| Dehashed | DeHashed is a hacked database search engine created for security analysts, journalists, security companies, and everyday people to help secure accounts and provide insight on database breaches and account leaks. |
| Xmind | Xmind is the most professional and popular mind mapping tool. |
| What U | This page echoes back to you several pieces of data that web sites 'know' about you. It is meant as a situational awareness tool for you to see how your device presents itself to other sites. |
| Spiderfoot HX | For professionals who want to automate OSINT for threat intelligence, asset discovery, attack surface monitoring or security assessments |
| TraceLabs | We crowdsource OSINT to help find missing people. |
| IP 2 Location | We offer free IP geolocation query |
| Grey Noise | GreyNoise collects and analyses untargeted, widespread, and opportunistic scan and attack activity that reaches every server directly connected to the Internet. Mass scanners (such as Shodan and Censys), search engines, bots, worms, and crawlers generate logs and events omnidirectionally on every IP address in the IPv4 space. |
| Intelligence X | Intelligence X is a very powerful search engine and data archive. It gets data from the darknet, document sharing platforms, whoisdata, public data leaks among various other sources. |
| ONYPHE.IO | Cyber Defense Search Engine |
Username OSINT
| Plugin | README |
|---|---|
| Sherlock | Hunt down social media accounts by username across social networks |
| Whats my name | This tool allows you to enumerate usernames across many websites |
| Knowem | Search over 500 popular social networks, over 150 domain names, and the entire USPTO Trademark Database to instantly secure your brand on the internet. |
| namecheckr | namecheckr.com is a tool to research domain and social username availability. Picking a unique and available name is a challenge for brand managers and creatives. namecheckr.com aims to simplify that process by helping our users find the best name for their new or existing project across many networks. |
| user search | Find someone by username or email on Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs. 600+ sites Supported! Largest Reverse User Search Online! |
| Name vine | Instantly Find A Domain Name With Matching Social Media Profiles |
Vehicle OSINT
| Plugin | README |
|---|---|
| LICENSE PLATES OF THE WORLD | LICENSE PLATES OF THE WORLD |
| nomerogram.ru | you can find a car by license plate for free(russian) |
| uk.vin-info | Free VIN Check /registration check of cars in UK |
GitHub
| Plugin | README |
|---|---|
| Maryam | OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. |
| GHunt | GHunt is a modulable OSINT tool designed to evolve over the years, and incorporates many techniques to investigate Google accounts, or objects. |