A collection of OSINT specific tools, forums and browser add-ons.
ADVANCED OSINT COLLECTION
Collections of Tools, Bookmarks, and other guides created by Sinwindie to aid in online investigations.
Searchable API Directory
Archivarix is a free open-source CMS combined with an online website downloader and a wayback rebuilder.
“The Traditional Swiss Army Knife for OSINT.”
Desktop mobile emulator (Android).
OSINT tool for testing privacy and social engineering vulnerability of organizations.
An OSINT tool that discovers sub-domains by searching Certificate Transparency logs.
Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained.
Data-mining and hacked database search engine, DeHashed (free and paid options available).
EXPOSING THE INVISIBLE – THE KIT
The Kit is a collaborative, self-learning resource that makes investigative techniques and tools used by experienced investigators more accessible to people and communities who feel motivated to start their own investigations, collect and verify information, build evidence and create a better understanding of issues without losing sight of ethical or safety considerations.
FACEBOOK SLEEP STATS
Using Facebook to track a users sleep.
Plugins for Firefox browser that are useful for OSIT investigations.
Build better data collections by finding new collection terms.
FOCA (Fingerprinting Organizations with Collected Archives) is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with FOCA.
All in one Information gathering tool.
Desktop mobile emulator (Android).
Reconnaissance tool for GitHub organizations.
GOOGLE CHROME ADDONS
Plugins for Google Chrome browser that are useful for OSIT investigations.
Exploit Database of Google Dorks.
A tool for making screenshots you can get on your Windows PC.
E-mails, subdomains and names Harvester – OSINT.
Use h8mail to find passwords through different breach and reconnaissance services, or the infamous “Breach Compilation” torrent.
Hunchly automatically collects, documents, and annotates every web page you visit.
Imago is a python tool that extract digital evidences from images.
Build interactive map of cameras from Shodan.
A checking tool for hash codes, passwords and emails leaked.
Maltego allows users to visualise pieces of information and the relationships between them.
OPEN SOURCE DIGITAL FORENSICS
Autopsy® and the Sleuth Kit®.
OSINT SUB REDDIT
Open forum to discuss all things OSINT related.
Forum for OSINT professionals.
OSRFramework, the Open Sources Research Framework is a AGPLv3+ project by i3visio focused on providing API and tools to perform more accurate online researches.
Don’t Just Search OSINT. Sweep It.
Python framework to scrape PasteBin pastes and analyze them.
“Incredibly fast crawler designed for OSINT.”
TOR hidden service crawler.
R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footprinting can be conducted quickly and thoroughly.
Social media scraping / data collection library for Facebook, Twitter, Reddit, YouTube, Pinterest, and Tumblr APIs.
SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target, which may be an IP address, domain name, hostname or network subnet.
A document metadata spider.
A project written in Python to twitter tracking and analysis without using Twitter API.
Download the entire Wayback Machine archive for a given URL.
YaSeeker is an OSINT tool to get information about any Yandex account.
Zen uses haveibeenpwned.com API to check if an email has been breached or not.