General Search & Investigation Engines
- Google Dorking → Advanced Google queries to find sensitive files.
- Shodan → Search engine for identifying connected devices (cameras, servers, IoT).
- Censys → Alternative to Shodan for scanning online infrastructures.
- The Wayback Machine → Access old versions of websites.
- Whois Lookup → Retrieve information about domain owners.
- Hunter.io → Find email addresses associated with a domain.
- Criminal IP → Designed to collect and analyze threat intelligence by gathering real-time data on more than 4.2 billion IP addresses and cyber assets.
People Search
- Have I Been Pwned → Check if an email has been leaked in data breaches.
- PeekYou → Find online profiles linked to a person.
- Maltego → Powerful OSINT tool for data correlation and visualization.
- Spokeo → Search for personal details via digital footprints.
Company & Infrastructure OSINT
- Amass → Map subdomains and network infrastructure.
- theHarvester → Gather emails, subdomains, and company-related data.
- Spiderfoot → Automate OSINT data collection for specific targets.
- FOCA → Extract metadata from online documents.
- ExifTool → Extract metadata from images (location, camera details, etc.).
- Google Reverse Image Search → Find where an image has been published online.
- TinEye → Alternative to Google Reverse Image Search.
- InVID → Verify the authenticity of videos and images.
- FotoForensics → Detect image manipulation.
Geolocation & Mapping
OSINT Analysis & Automation
- Recon-ng → Automate OSINT reconnaissance.
- Mitaka → OSINT research tool for browsers.
- Hunchly → Web evidence archiving for digital investigations.
- Buscador → Linux distribution specialized in OSINT.