Awesome OSINT
by jivoi · jivoi/awesome-osint
A curated list of amazingly awesome open-source intelligence (OSINT) tools and resources.
is the world's largest and preeminent platform of African-published scholarly journals
A database of over 240 million scientific works, with PDFs for all Open Access papers in their catalogue (~ 40 million)
Search more than 27 millions citations for biomedical literature from MEDLINE, life science journals, and online books.
is an open-source web browser that allows you to completely block ads and website trackers.
Bromite is a Chromium fork with ad blocking and enhanced privacy; take back your browser. Works only on Android.
Tor is a free software that prevents people from learning your location or browsing habits by letting you communicate anonymously on the Internet.
Searches code from the entire github public repositories for a given specific string or using regular expression.
Help find real world examples of functions, API's and libraries across 10+ sources.
Index thousands of repos on your machine and search through them in a fast, powerful, and modern web interface.
Collection of full text of historical (not up-to-date) cases from United States state appellate courts.
Aggregated information from publicly available sources on publicly traded companies worldwide.
Detailed information on startup businesses, with a specific focus on funding sources and funding procedures used by specific businesses.
Periodic reports and extensive corporate disclosures from all businesses publicly traded in the United States.
Free company-intelligence platform for Africa: search and verify companies across 18+ official national registries (Nigeria's CAC, Tanzania's BRELA, Mauritius's CBRD, Senegal's RCCM and more), with the official source and a last-verified date on every record.
Global search of registered corporate entities and their associated individual officers or investors.
SOpen-source browser-only worksheet for common SEC Forms 3, 4, and 5 ownership-reporting deadline planning, with memo and CSV copy outputs.
Search information about a company such as aquisitions, investors, people, research, etc
AThe amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
CColumbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
DA fast and multi-purpose DNS toolkit from ProjectDiscovery for running DNS probes, resolving records and filtering DNS responses.
Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Works by ingesting certificate transparency logs.
SMulti-source subdomain enumeration tool querying crt.sh Certificate Transparency logs, HackerTarget, and RapidDNS. Features HTTP/HTTPS liveness probing with status codes, alive/dead filtering, multi-format export (TXT/JSON/CSV), and a full CLI.
Check if an email, username or phone appears in a data breach, showing the sources; free searches, developer API and chat bots.
Because people have the right to know if their data has been leaked.
LPassive leak enumeration CLI tool that searches across 10 breach databases simultaneously.
Check if an email address has been exposed in known data breaches. Fast lookup across multiple breach databases, with a simple API available.
Powerful search engine designed to help you find and analyze data breaches.
Open-data platform consolidating Brazilian crime statistics (RS neighborhood-level, MG/RJ municipality, national PRF/DATASUS). Free API, CC BY 4.0.
Comprehensive searchable database of 2M+ DOJ Epstein case documents, 1,700+ persons, flight logs, emails, and network graph visualization.
The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
A tool for backlink research, organic traffic research, keyword research, content marketing & more.
Search for Azure Tenant using its domain name or its ID
The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
is a website that will help you find out all the technologies used to build a particular websites.
Searchable archive of exposed panels and misconfigurations found across domains by continuous internet-wide scanning; look up the exposure findings on record for a given domain.
Maps who links to any domain using the open Common Crawl hyperlink graph. Free, no-signup referring-domain and competitor link-footprint lookups for domain research.
Free and open-source domain and infrastructure research toolkit combining DNS, RDAP, WHOIS, passive subdomain discovery, IP and ASN data, email authentication checks, and TLS certificate inspection. No account required.
Free DNS, WHOIS, DKIM discovery, SPF/DMARC analysis and blacklist checks with plain-English results, no signup.
is a website that will help you discover hosts related to a specific domain.
Aggregate DNS, WHOIS/RDAP, SSL, subdomains (CT logs + DNS bruteforce), and SPF/DMARC posture in one call. Free tier; MIT.
Retrieve DNS records, subdomains, SSL certificates and WHOIS / RDAP data for a given website.
A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
Threat Intelligence API that detects if a IP address is associated with a VPN, Proxy, TOR or Bots.
FullHunt is an OSINT tool focused on identifying and protecting internet-exposed assets.
Free per-IP reports from a distributed honeypot network: what an IP scanned for, matched CVE exploit paths, JA4/JA4H/HASSH client fingerprints, captured payloads and VirusTotal-verified malware it delivered. Queryable anonymously on the web, over a JSON API and via an MCP server.
is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
Online service for detailed and free analysis of suspicious files and URLs.
The site allows you to look up domain registration information (WHOIS) on the internet
AI-powered DNS and email security scanner with SPF, DKIM, DMARC, DNSSEC checks and fix suggestions.
is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
Unlimited Reverse DNS, Subdomain and Reverse CNAME lookups, also provides JSON APIs.
IP geolocation API providing city, country, timezone, ASN, and currency data from IP addresses.
A comprehensive IP intelligence database and API for accurate geolocation, ASN mapping, and VPN/Tor/Proxy detection.
is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
Free, no-login IP reputation lookup that aggregates up to 8 risk sources, flags residential vs datacenter, and profiles /24 C-block neighbors. Also offers a CLI and a Chrome extension.
Threat intelligence platform aggregating malicious IP and domain data from multiple security feeds with real-time reputation scoring and threat categorization.
Is a free platform offering network diagnostic tools (ping, traceroute, MTR, DNS, WHOIS, HTTP, etc.) tailored for ISPs and infrastructure professionals.
Threat analysis service for URLs, files, certificates, domains, and suspicious hashes.
is an online database that will provide you a report with detail information about a particular website and the history associated with it.
uses advanced search operators (Google Dorks) to find juicy information about target websites.
is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
SEnumerate available domains generated modifying the original domain name through different cybersquatting techniques
Fast subdomain finder with multiple search modes and the most extensive data sources, offering real-time notifications.
Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
An online tool that displays your mtr / traceroute / flyingroutes output on a map for visual analysis.
Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
is a website that gives you a free and comprehensive report about a specific website.
is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
A Swiss Army knife for scaled intelligence and metadata on IP addresses and domains.
Wautomates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architecture lookups, etc.
is a web service for Whois data contained within ARIN's registration database
Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data to the public infoset.
Blacklist Checker is an email blacklist checker, monitor and API that checks 100+ blacklists in seconds
DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the world’s largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise.
Improve deliverability, reduce bounce rates, prevent fraud and minimize funnel leaks.
A browser-based utility to quickly extract email addresses from bulk text or raw data for further investigation.
is a website that allows you to find email address formats used by different companies.
a powerful tool designed to aid professionals in generating a range of potential email addresses for a specific contact.
is an email address verification platform that will check whether a given email address exists or not.
GNode.js tool to scan GitHub repositories for exposed email addresses and names.
HPassword Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email.
Search across multiple data breaches to see if your email address has been compromised.
Hallows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Hunter lets you find email addresses in seconds and connect with the people that matter for your business.
Indexes darknet-exposed infostealer logs and makes them searchable and actionable for security teams, investigators, researchers, and digital forensics professionals.
Forensics platform focused on reverse email lookup and email data enrichment.
Data Breach Search Engine with 7.5B+ entries collected from more than 3000 databases. Search by e-mail, username, keyword, password or corporate domain name.
Scans for compromised emails and domains in stealer logs, offering proactive breach prevention and real-time alerts.
MFree email OSINT tool, checks 800+ platforms, breach exposure via HIBP, infostealer logs via Hudson Rock, and builds a cross-platform identity graph with confidence scoring. pip install mailaccess
Email search tool that finds and aggregates data on a target email from over a hundred websites.
MultiRBL Valli checks if an IP or domain is listed on multiple public RBLs (blacklists) simultaneously.
OOSINT Eye: A WPF Desktop Application for GitHub Intelligence, Social Media Reconnaissance, and Subdomain Discovery
is a tool that allows you to discover business email addresses for users, even if their email address may not be publicly available or shared.
Find anyone's contact information for lead research or talent acquisition.
Extensive database of U.S. government public records obtained through federal and state public records requests. Automated tool that will make public records requests and follow up until records are obtained on your behalf.
Official listing of U.S. attorneys qualified to represent individuals in U.S. patent office proceedings.
FTool for scraping large Facebook friend lists without being rate-limited.
To find your Facebook personal numeric ID for facebook graph API operations, fb:admins, social plugins.
A large dataset containing 533 million Facebook accounts was made available for download. The data was obtained by exploiting a vulnerability that was, according to Facebook, corrected in August 2019. Check if a telephone number is present within the Facebook data breach.
The definitive Internet reference source for urban legends, folklore, myths, rumors, and misinformation.
is a website that allows you to find any types of files that are publicly available in a Google Drive.
Central resource cataloging malicious file extensions, their risks, OS and mitigations.
Advanced Mega.nz File Search Engine. Search and discover files from Mega.nz with our intelligent crawler technology. Access over 9 million indexed files instantly.
A search engine for open directories. Find millions of publicly available files!
LTool for real-time tracking of LoL (League of Legends) players gaming activities including detection when a user starts or finishes a match with support for email alerts, CSV logging, playtime stats and more
PTool for real-time tracking of Sony Playstation (PSN) players gaming activities including detection when a user gets online/offline or plays games with support for email alerts, CSV logging, playtime stats and more
STool for real-time tracking of Steam players' gaming activities including detection when a user gets online/offline or plays games with support for email alerts, CSV logging, playtime stats and more
XTool for real-time tracking of Xbox Live players gaming activities including detection when a user gets online/offline or plays games with support for email alerts, CSV logging, playtime stats and more
You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough
AI-powered geolocation tool for identifying locations from images.
Geolocate photos by shadow analysis. Browser port of Bellingcat's ShadowFinder. No Jupyter, no accounts, client-side.
Real-time global intelligence platform with live conflict tracking, military flight and vessel monitoring, GPS jamming data, satellite imagery, and geopolitical risk scores across 5 specialized dashboards.
A global map of databases and OSINT sources by applicable location.
GitHub lookup tool to search for username history, associated emails, and deleted repositories.
GTool for real-time tracking of GitHub users' activities including profile and repository changes with support for email alerts, CSV logging, detection when a user blocks or unblocks you and more
An OSINT tool for GitHub that extracts hidden email addresses, commit timezones, and activity patterns via .patch metadata.
Discover related open source projects. Find alternatives and other similar repositories. Updated daily.
SAn advanced tool for checking GitHub repositories, with star statistics, including fake star analysis and data visualization.
AProfessional OSINT dorking tool featuring adaptive delay, circuit breaker, and automatic backend fallback to avoid IP bans and rate limits.
DorkGenius is the ultimate tool for generating custom search queries for Google, Bing, and DuckDuckGo. - Our cutting-edge app uses the power of AI to help you create advanced search queries that can find exactly what you're looking for on the web.
The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.
Generate Search Engine (Google, FOFA, Shodan, Censys, ZoomEye) Dorks using AI.
API and free web tool that reads EXIF and XMP, validates C2PA Content Credentials against official trust lists, and runs classical pixel forensics, returning one typed verdict for any image.
Social media and WhatsApp profile image tool to find when a profile image was uploaded.
Geolocate the origin point of a photograph using geometric ray intersection. Client-side, no uploads.
You can search for an image by uploading + with URL or typing the keyword or any word you want to explore related to images.
GPython tool using Graylark's AI-powered geo-location service to uncover the location where photos were taken.
is our reverse image search tool for completing individual searches. When you upload an image to this page, we'll scour the internet to find its source and all of the other pages where it has been posted.
search engine for KartaView imagery. It supports natural-language search and search by image
Reverse image search tool with facial recognition, created for finding people, similar images, copies of photos, identical places and more.
an online face search engine that goes through the Internet to find pictures containing given faces.
Take back control of your images. See where & how your images are being used online!
Turn a Google spreadsheet into a beautiful, searchable listing in seconds.
the intelligent diagramming application that brings teams together to make better decisions and build the future.
a family of tools gives you the leverage to create generative design the way you want.
a modern way to create powerful, performant, polyglot data apps built on open source.
Pinteractive data visualization and analytics component, well-suited for large, streaming and static datasets.
An Instagram Post Viewer lets you view posts, stories, and profiles from public accounts with ease. Free viewer limit: 1.
ITool for real-time tracking of Instagram users' activities and profile changes with support for email alerts, CSV logging, showing media in the terminal, anonymous story downloads and more
IInteractive OSINT CLI / REPL with 35+ slash-commands: profile + media + followers + dossier + geo-fingerprint (/where), shared-followers intersection (/intersect), superfan ranking (/fans), location search (/place), URL→metadata resolution (/postinfo), posting-cadence histogram (/timeline), Maltego CSV export. Token-based (HikerAPI, no IG account needed → no ban risk) with optional logged-in aiograpi backend.
OOsintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname.
OTool that maps your target’s Instagram data and relationships in Neo4j for social network analysis.
Ta tool that allows you to extract information from instagrams accounts such as s, phone numbers and more
is an online job searching website that gives job seekers free access to search for a job, post their resumes, and research companies.
TTool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
Live cyber attack blocked by BunkerWeb, the open source and next generation Web Application Firewall.
Explore the top cyber threats of 2025, including ransomware, infostealers, and cloud vulnerabilities.
FortiGuard Outbreak Alerts provides key information about on-going cybersecurity attack with significant ramifications affecting numerous companies, organizations and industries.
A real-time global view of DDoS attacks, hacking attempts, and bot assaults mitigated by Imperva security services.
Find out if you are under cyber-attack here.
Radware's Live Threat Map presents near real-time information about cyberattacks as they occur, based on our global threat deception network.
Discover cybersecurity trends with Thales' Cyberthreat map. Explore targeted areas, frequent attacks, affected sectors, and prevalent malware.
Real-time visualization of global cyber attacks and threats. Monitor live cyber security incidents, attack origins, targets, and threat categories worldwide.
Live cyber threat intelligence dashboard combining CISA advisories, active malware campaigns, CVE feeds, and global cyber event heatmaps alongside geopolitical and military context.
Illustrates those we've seen in the past 24 hours, consisting of threats detected by our antivirus engines, malware and advanced persistent threats.
is an image sharing social media service used to easly discover, share and save ideas using visual representation.
PCross-domain OSINT dashboard combining vessel tracking, airspace activity, official notices, environmental context, and satellite detections for maritime and airspace analysis.
a FREE AIS vessel tracking web site. VesselFinder displays real time ship positions and marine traffic detected by global AIS network.
LTool for real-time tracking of Last.fm users' listening activity including detection when user gets online & offline, pauses or resumes playback, all played songs, its duration, skipped songs, with optional auto-play, email alerts, CSV logging, session stats and more
STool for real-time tracking of Spotify friends' listening activity including detection when user gets online & offline, played songs, its duration, skipped songs, with optional auto-play, email alerts, CSV logging, session stats and more
STool for real-time tracking of Spotify users' activities and profile changes, including playlists, with support for email alerts, CSV logging, showing media in the terminal, detection of profile picture changes and more
Research, analysis, and case studies focused on disinformation narratives and influence operations.
Media law and misinformation analysis relevant to disinformation investigations.
Investigative reporting on cybercrime, breaches, and threat actors.
Current OSINT tradecraft, investigations, and monitoring workflows.
High-signal incident reports, malware observations, and operational security analysis.
Research on surveillance, spyware, censorship, and digital threats relevant to advanced OSINT work.
Missing-person OSINT methodology, case support, and investigative workflows.
G
N
C
G
F
H
N
S
E
C
T
I
A
L