OSINT & Security Tools Directory

AbuseIPDB

Dark Web & Threat Intelligence

0

Crowd-sourced database of IPs reported for abuse, with confidence scores and an API.

ADS-B Exchange

Transport & Vehicle Tracking

0

Unfiltered flight tracking — shows military and private aircraft that other trackers hide.

Ahmia

Dark Web & Threat Intelligence

0

Search engine for Tor .onion sites that filters abuse material; the usual starting point for dark-web research.

AlienVault OTX

Dark Web & Threat Intelligence

0

Open Threat Exchange: community-shared indicators of compromise, pulses and adversary profiles.

Amass

IP, Domain & Infrastructure

0

OWASP tool for in-depth attack-surface mapping and external asset discovery.

Amnesty YouTube DataViewer

Image & Video Analysis

0

Extracts exact upload time and thumbnails of a YouTube video for reverse image search.

Ansible Lockdown

Compliance & Server Hardening

0

Ansible roles that apply CIS and STIG baselines to Linux and Windows automatically.

AOL

General Search

0

A search engine powered by Bing, offering web, image, video, and news search, often bundled with AOL’s other services and content.

archive.today

Web Archives & Caches

0

On-demand page archiving that captures a permanent snapshot (including many JS-heavy pages).

Awesome OSINT

OSINT Frameworks & Collections

0

Community-maintained list of OSINT resources on GitHub.

Brave Search

General Search

0

Independent index — results often differ from Google and Bing, good for second-opinion searches.

BreachDirectory

Breach & Leak Data

0

Free lookup that shows whether an email or username appears in known breaches, with partial password hashes.

BuiltWith

IP, Domain & Infrastructure

0

Technology profiler: CMS, analytics, ad networks, hosting and frameworks behind a website.

Burp Suite

Vulnerability & Pentest

0

Industry-standard web app testing proxy; Community edition is free, Pro adds the scanner.

CachedView

Web Archives & Caches

0

One box to query Wayback Machine, archive.today and other caches for a URL.

Carrot2

General Search

0

Clusters search results into topics, useful for quickly mapping what exists about a subject.

CISA Known Exploited Vulnerabilities

Compliance & Server Hardening

0

Authoritative list of CVEs confirmed exploited in the wild — patch these first.

Companies House (UK)

People & Company Research

0

Official UK company register with free filings and officer data.

Crunchbase

People & Company Research

0

Startup and investor intelligence: funding rounds, founders and acquisitions.

DNSDumpster

IP, Domain & Infrastructure

0

Free domain recon: DNS records, subdomains, MX and a visual host map.

DuckDuckGo

General Search

0

Privacy-respecting search with useful bang shortcuts (!g, !w) and different ranking from Google.

EmailRep

Email OSINT

0

Reputation score for any email: age, breach history, social presence and deliverability signals.

Exif.tools

Metadata & File Analysis

0

Simple drag-and-drop metadata viewer for photos and documents.

Exploit-DB

Vulnerability & Pentest

0

Archive of public exploits and proof-of-concept code, maintained by OffSec.

FaceCheck.ID

Image & Video Analysis

0

Reverse face search across social media and news photos (use lawfully and with care).

Firefox Monitor

Breach & Leak Data

0

Mozilla’s breach alert service built on Have I Been Pwned data; monitors your own addresses.

FOFA

IP, Domain & Infrastructure

0

Search engine for exposed assets with strong fingerprinting of frameworks and devices.

FotoForensics

Image & Video Analysis

0

Error-level analysis, metadata and hidden-pixel views to spot edited images.

GeoHints

Geolocation & Maps

0

Reference of road signs, bollards, licence plates and poles by country for photo geolocation.

GeoSpy

Geolocation & Maps

0

AI that estimates where a photo was taken from visual cues; always verify manually.

Google Advanced Search

Google Dorks & Advanced Search

0

Form that builds precise Google queries (exact phrase, site, filetype, date) without memorising operators.

Google Lens

Image & Video Analysis

0

Visual search from Google: identify objects, landmarks, text and similar images.

Google Maps

Geolocation & Maps

0

Satellite, Street View and place data — the baseline for any geolocation check.

GreyNoise

Dark Web & Threat Intelligence

0

Tells you whether an IP is mass-scanning the internet (noise) or targeting you specifically.

Holehe

Email OSINT

0

Checks whether an email is registered on 120+ sites (Twitter, Instagram, Imgur…) using password-reset flows, without notification.

Hunchly

OSINT Frameworks & Collections

0

Captures every page you visit during an investigation with hashes and notes for evidence.

Hybrid Analysis

Dark Web & Threat Intelligence

0

Free malware sandbox by CrowdStrike: detonate files and URLs and get behavioural reports.

ICIJ Offshore Leaks Database

People & Company Research

0

Searchable data from the Panama, Paradise and Pandora Papers on offshore entities.

IDCrawl

Username OSINT

0

Free people search that aggregates usernames, social profiles, and public records in one place.

Indian Kanoon

People & Company Research

0

Free full-text search of Indian court judgments and laws.

Instaloader

Social Media OSINT

0

Downloads Instagram photos, videos, captions, comments and metadata from public profiles and hashtags.

Instant Username Search

Username OSINT

0

Checks username availability across 100+ platforms in real time — a fast first pass.

IntelTechniques Tools

OSINT Frameworks & Collections

0

Michael Bazzell’s search tools for emails, usernames, phones, domains and more.

ISO/IEC 27001:2022

Compliance & Server Hardening

0

The official information security management system standard (purchase from ISO).

Jeffrey’s Image Metadata Viewer

Metadata & File Analysis

0

Online EXIF/IPTC/XMP viewer that shows camera, GPS and edit history of an uploaded or linked image.

KartaView

Geolocation & Maps

0

Open street-level imagery, useful where Street View is unavailable.

LeakCheck

Breach & Leak Data

0

Searches billions of leaked records by email, username, phone or domain; shows sources and dates.

Maigret

Username OSINT

0

Collects a dossier on a username by checking 3,000+ sites, with HTML/PDF reports and recursive search.

MarineTraffic

Transport & Vehicle Tracking

0

Global AIS ship tracking: positions, port calls and vessel particulars.

Metagoofil

Metadata & File Analysis

0

Downloads public documents from a domain and extracts metadata such as usernames and software versions.

Metasploit Framework

Vulnerability & Pentest

0

Exploitation framework used to validate vulnerabilities during authorised penetration tests.

Ministry of Corporate Affairs (MCA)

People & Company Research

0

Official Indian company and LLP master data, directors (DIN) and filings.

MISP

Dark Web & Threat Intelligence

0

Open-source threat intelligence platform for storing, correlating and sharing IOCs.

Mitaka

OSINT Frameworks & Collections

0

Browser extension that searches selected IOCs (IP, domain, hash) across dozens of OSINT services.

Mozilla SSL Configuration Generator

Compliance & Server Hardening

0

Generates secure TLS configs for Nginx, Apache, HAProxy and more.

MXToolbox

Email OSINT

0

DNS, MX, SPF, DKIM and blacklist lookups for any domain — the standard mail diagnostics toolkit.

Nikto

Vulnerability & Pentest

0

Web server scanner that checks for dangerous files, outdated software and misconfigurations.

NIST Cybersecurity Framework

Compliance & Server Hardening

0

Widely used framework (Identify, Protect, Detect, Respond, Recover, Govern) for structuring a security programme.

Nuclei

Vulnerability & Pentest

0

Fast template-based vulnerability scanner with a huge community template library.

Numverify

Phone Number OSINT

0

Validates phone numbers worldwide and returns carrier, line type and location via a simple API.

NVD (National Vulnerability Database)

Vulnerability & Pentest

0

US government CVE database with CVSS scores and references.

Octoparse

Web Scraping & Automation

0

No-code visual web scraper with cloud scheduling.

OpenRailwayMap

Transport & Vehicle Tracking

0

Detailed worldwide railway infrastructure map built on OpenStreetMap.

OpenSCAP

Compliance & Server Hardening

0

Automated compliance scanning against SCAP profiles such as CIS and PCI-DSS, with remediation scripts.

OpenStreetMap

Geolocation & Maps

0

Community-built map with detailed features often missing from commercial maps.

OpenVAS / Greenbone

Vulnerability & Pentest

0

Full-featured open-source vulnerability scanner for networks and hosts.

Osintgram

Social Media OSINT

0

Interactive shell for Instagram OSINT: followers, tagged photos, captions, geotags and more.

Overpass Turbo

Geolocation & Maps

0

Query OpenStreetMap data (e.g. all petrol stations near a river) to narrow a location.

OWASP ASVS

Compliance & Server Hardening

0

Application Security Verification Standard: requirement checklist for secure web apps.

OWASP ZAP

Vulnerability & Pentest

0

Free web application security scanner and intercepting proxy maintained by the ZAP team.

Phonebook.cz

Email OSINT

0

Lists all email addresses, subdomains and URLs discovered for a domain (by Intelligence X).

Pipl

People & Company Research

0

Commercial identity resolution platform linking emails, phones and social profiles.

Playwright

Web Scraping & Automation

0

Browser automation for Chromium, Firefox and WebKit; reliable for scraping modern JS-heavy sites.

Pulsedive

Dark Web & Threat Intelligence

0

Threat intelligence search for domains, IPs and URLs with risk scoring and enrichment.

Puppeteer

Web Scraping & Automation

0

Node.js library to control headless Chrome for scraping, screenshots and automation.

Recon-ng

OSINT Frameworks & Collections

0

Modular web reconnaissance framework with a Metasploit-like console.

SEC EDGAR

People & Company Research

0

Full-text search of US public company filings.

Security Headers

Compliance & Server Hardening

0

Scores a site’s HTTP security headers (CSP, HSTS, X-Frame-Options…) with fixes.

SecurityTrails

IP, Domain & Infrastructure

0

Historical DNS, WHOIS and subdomain data for attack-surface mapping.

Sentinel Hub EO Browser

Geolocation & Maps

0

Free satellite imagery (Sentinel, Landsat) with time-lapse for change detection.

Snap Map

Social Media OSINT

0

Public Snapchat stories plotted on a world map — useful for verifying events at a location.

Social Blade

Social Media OSINT

0

Historical follower, view and growth statistics for YouTube, Instagram, X, Twitch and TikTok accounts.

Sowsearch

Social Media OSINT

0

Rebuilds Facebook graph-search style queries for people, places, posts and photos.

sqlmap

Vulnerability & Pentest

0

Automates detection and exploitation of SQL injection flaws.

SSL Labs Server Test

Compliance & Server Hardening

0

Grades a public HTTPS server’s certificate, protocol and cipher configuration.

Startpage

General Search

0

Google results without tracking; handy for anonymous searching during investigations.

Subfinder

IP, Domain & Infrastructure

0

Fast passive subdomain enumeration using many online sources.

Telegago

Social Media OSINT

0

Custom Google search engine focused on public Telegram channels, groups and posts.

ThreatFox

Dark Web & Threat Intelligence

0

Free IOC sharing platform from abuse.ch: malware hashes, C2 IPs and domains.

Tor Browser

Dark Web & Threat Intelligence

0

Privacy-focused browser needed to access .onion services safely during dark-web investigations.

TruePeopleSearch

People & Company Research

0

Free US people search returning addresses, phones and relatives.

URLhaus

Dark Web & Threat Intelligence

0

abuse.ch feed of URLs used for malware distribution; search by domain, IP or hash.

urlscan.io

IP, Domain & Infrastructure

0

Sandboxed website scanner that records requests, screenshots and technologies for any URL.

Vahan (Parivahan Sewa)

Transport & Vehicle Tracking

0

Government of India vehicle registration lookup (RC status) by registration number.

VesselFinder

Transport & Vehicle Tracking

0

Free AIS vessel positions, voyage data and ship photos.

ViewDNS.info

IP, Domain & Infrastructure

0

Dozens of quick lookups: reverse IP, reverse WHOIS, DNS history, port scan, IP location.

Wappalyzer

IP, Domain & Infrastructure

0

Browser extension that identifies the technologies a website is built with.

Wayback Machine Extension

Web Archives & Caches

0

Browser extension to save pages, view archived versions and check for broken links.

Wazuh

Compliance & Server Hardening

0

Open-source SIEM/XDR with file-integrity monitoring, vulnerability detection and CIS compliance checks.

Whois (ICANN Lookup)

IP, Domain & Infrastructure

0

Official ICANN registration data lookup for domain names.

yt-dlp

Image & Video Analysis

0

Downloads video and metadata from YouTube and 1,000+ other sites for offline analysis.

Zauba Corp

People & Company Research

0

Quick view of Indian company registrations, directors and charges, sourced from MCA.

ZoomEye

IP, Domain & Infrastructure

0

Cyberspace search engine for internet-exposed devices and services (Shodan alternative).

Arkham Intelligence

Blockchain & Crypto Tracing

0

Entity-based blockchain intelligence and deanonymization platform with wallet attribution.

Blockchair

Blockchain & Crypto Tracing

0

Search and analytics engine for Bitcoin, Ethereum, and multiple chains.

Ask

General Search

0

Originally a question-and-answer-based search engine, now provides general search capabilities and curated answers.

MetaSleuth

Blockchain & Crypto Tracing

0

Visual blockchain investigation tool for tracing cross-chain fund flows and address relationships.

Baidu

General Search

0

The leading Chinese-language search engine, offering web search, maps, news, and other online services primarily for users in China.

Breadcrumbs

Blockchain & Crypto Tracing

0

Blockchain transaction visualizer and graph analysis tool with clustering and tagging.

Bing

General Search

0

Microsoft’s search engine, known for its visual search interface, integration with Microsoft services, and AI-powered results.

OKLink Explorer

Blockchain & Crypto Tracing

0

Multi-chain blockchain explorer with address tagging and fund tracing tools.

EntireWeb

General Search

0

A privacy-focused search engine offering ad-free search results without tracking user data.

Whale Alert

Blockchain & Crypto Tracing

0

Tracks large on-chain transactions and exchange movements in real time.

Goodsearch

General Search

0

A charity-focused search engine that donates a portion of its revenue to user-selected causes for every search performed.

Etherscan

Blockchain & Crypto Tracing

0

Ethereum blockchain explorer with token, contract, and transaction details.

Google Search

General Search

0

The world’s most popular search engine, known for its speed, accuracy, and comprehensive results across web, images, news, and more.

Blockchain Explorer

Blockchain & Crypto Tracing

0

BTC and ETH explorer for checking transactions, blocks, and addresses.

Bitquery Explorer

Blockchain & Crypto Tracing

0

Comprehensive on-chain data API and explorer for multiple blockchains.

DEXTools

Blockchain & Crypto Tracing

0

Real-time DeFi trading data, wallet tracking, and liquidity analysis.

Naver

General Search

0

South Korea’s leading search portal, offering integrated search results, news, blogs, and social content.

ScamSniffer

Blockchain & Crypto Tracing

0

Monitors and reports on phishing and scam addresses across chains.

Search Page

General Search

0

A niche search engine that operates its own crawlers and ranking pipeline.

Revoke.cash

Blockchain & Crypto Tracing

0

Audit and revoke smart contract approvals to prevent token drain exploits.

Zapper

Blockchain & Crypto Tracing

0

Portfolio and wallet visualizer useful for mapping DeFi interactions.

Wolfram Alpha

General Search

0

A computational knowledge engine that provides answers to factual queries by computing data rather than indexing web pages.

Tenderly

Blockchain & Crypto Tracing

0

Smart contract debugger and transaction simulator with detailed analytics.

Yahoo! Search

General Search

0

A web portal that offers search (powered by Bing), news, finance, email, and a variety of other online services.

Yandex

General Search

0

Russia’s largest search engine, offering web search, maps, translation, and many other services, similar to Google.

Solscan

Blockchain & Crypto Tracing

0

Explorer and analytics dashboard for Solana transactions and addresses.

Google Hacking Database

Google Dorks & Advanced Search

0

Curated repository of Google dorks to find exposed pages and files.

DorkSearch

Google Dorks & Advanced Search

0

Web app to automate Google dork queries with intelligent suggestions.

Pagodo

Google Dorks & Advanced Search

0

CLI/Python script to run and manage Google dork queries at scale.

Google Tag Assistant

Google Dorks & Advanced Search

0

Chrome extension for detecting Google Analytics/GTM tags on pages.

Wayback Google Analytics

Google Dorks & Advanced Search

0

Uses Wayback/Archive data to collect historical GA/GTM IDs.

Reverse Analytics Search

Google Dorks & Advanced Search

0

Lookup sites sharing the same Google Analytics/GTM ID.

InVID/WeVerify

Image & Video Analysis

0

Toolkit for image & video verification, keyframe extraction, reverse-image chaining.

Forensically

Image & Video Analysis

0

Web-based image forensics (ELA, clone detection, noise analysis, metadata).

Google Reverse Image Search

Image & Video Analysis

0

Broad reverse image search to find duplicates and sources.

Yandex Images

Image & Video Analysis

0

Strong reverse-image engine, often effective for faces & Eastern-Europe results.

TinEye

Image & Video Analysis

0

Image-origin & duplicate finder with oldest-seen functionality.

Bing Visual Search

Image & Video Analysis

0

Microsoft's reverse image search; good for objects and landmarks.

PimEyes

Image & Video Analysis

0

Face-focused image search using facial-recognition to find matches online.

Shodan

IP, Domain & Infrastructure

0

Search engine for internet-connected devices; reveals open ports/services.

Censys

IP, Domain & Infrastructure

0

Internet-wide host & certificate search for mapping exposed assets.

IPinfo

IP, Domain & Infrastructure

0

IP geolocation, ASN, ISP, and related metadata with API access.

ARIN WHOIS

IP, Domain & Infrastructure

0

Regional registries for IP allocation and registrant lookup.

SpiderFoot

IP, Domain & Infrastructure

0

Automated OSINT reconnaissance & attack surface mapping from many sources.

Maltego

IP, Domain & Infrastructure

0

Visual link analysis platform with transforms to map relationships.

theHarvester

IP, Domain & Infrastructure

0

Email/subdomain/host data collection from public sources (CLI).

Netcraft Site Report

IP, Domain & Infrastructure

0

Site profiling (hosting, tech stack, history, phishing/malware flags).

Have I Been Pwned

Breach & Leak Data

0

Check if emails/phones appear in known breaches with notifications.

DeHashed

Breach & Leak Data

0

Large searchable database of leaked credentials and personal data.

Snusbase

Breach & Leak Data

0

Search across breached databases and paste sites for emails/usernames/IPs.

Intelligence X

Breach & Leak Data

0

Archive+search engine for leaks, paste sites, darknet and historic content.

Google Earth Pro

Geolocation & Maps

0

High-resolution satellite imagery, 3D terrain, Street View and historical imagery.

Mapillary

Geolocation & Maps

0

Crowdsourced street-level imagery useful where Street View is limited.

Wikimapia

Geolocation & Maps

0

Collaborative map annotations and user-added place descriptions.

SunCalc

Geolocation & Maps

0

Sun/shadow position calculator for verifying photo timestamps via shadows.

OSINT Framework

OSINT Frameworks & Collections

0

Curated directory of OSINT tools & techniques by category (huge index).

Sherlock

Username OSINT

0

Fast username search across hundreds of social platforms to find accounts.

WhatsMyName

Username OSINT

0

Up-to-date list/patterns for username discovery across many sites.

Namechk

Username OSINT

0

Username availability checks across many platforms to find presence.

Social Searcher

Social Media OSINT

0

Real-time multi-platform social search for keywords & user mentions.

FOCA

Metadata & File Analysis

0

Finds & extracts metadata from office docs/PDFs hosted on websites.

Tesseract OCR

Metadata & File Analysis

0

Open-source OCR engine to extract text from images and scanned PDFs.

Truecaller

Phone Number OSINT

0

Large crowdsourced caller-ID and reverse phone lookup (app & web).

NumLookup

Phone Number OSINT

0

Web-based reverse phone lookup (CNAM/carrier info) for many numbers.

Sync.Me

Phone Number OSINT

0

Reverse lookup and spam identification services for phone numbers.

IOC Web Scraper

Web Scraping & Automation

0

Python web scraping framework to pull data from a website including links and images

Scrapy

Web Scraping & Automation

0

Python web scraping framework for building scalable crawlers.

Selenium

Web Scraping & Automation

0

Browser automation for scraping dynamic JS pages and interactions.

Instant Data Scraper

Web Scraping & Automation

0

Browser extension that auto-detects tabular data for one-click scraping.

Apify

Web Scraping & Automation

0

Cloud scraping/automation platform with prebuilt actors for many sites.