- Social network resources and tools
- Cloud Storage and File Sharing
- Geolocalization
- Search engine services
- Other
- Lists and documentation
- Gitrecon: OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.
- GitStalk: OSINT tool to get information from a Github and Gitlab profile.
- Ghunt: GHunt is an OSINT tool to extract information from any Google Account using an email.
- Epieos Gmail: Get similar results as Ghunt but online!
Once you have a Google ID you can use any of the following URLs to get more information about the account:
- Google Maps:
https://www.google.com/maps/contrib/<ID> - Google Photos:
https://get.google.com/albumarchive/<ID>
Get info about a Youtube account:
https://www.youtube.com/feeds/videos.xml?user=<username>
Find Youtube accounts:
site:youtube.com/channel intitle:"<fullname>"
Check if an email is already registered in Twitter:
https://api.twitter.com/i/users/email_available.json?email=<email>
- SkypeHunt: A python script to obtain user information using Skype Web API.
https://api.protonmail.ch/pks/lookup?op=index&search=<email>
- PyrOsint: PyrOsint is a simple python script that uses Mediafire API to obtain the owner of a media file for OSINT purposes.
- Shade Map: The source of shade data for the planet. View shadows cast across a map of the Earth in real-time. See how shadows fall in specific locations, at specific dates/times.
- spyse - all in one recon service. scans the entire internet using OSINT and collects all the data in its own DB for instant access. Scanned info: ipv4 host, AS, DNS, sub/domains, whois/site info, ports/banners/protocols etc...
- criminalip.io - Criminal IP is a specialized Cyber Threat Intelligence (CTI) search engine that allows users to search for various security-related information such as malicious IP addresses, domains, banners, etc. It can be widely integrated.
- Namechk.sh: Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
- shodan: Shodan is a search engine for Internet-connected devices.
- phonebook.cz: Get emails by domain search.
- Spytox: Email search
- shodan.io
- wigle.net
- grep.app
- app.binaryedge.io
- onyphe.io
- viz.greynoise.io
- censys.io
- hunter.io
- fofa.so
- zoomeye.org
- leakix.net
- intelx.io
- app.netlas.io
- searchcode.com
- urlscan.io
- publicwww.com
- DataSploit: An OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
- OSINT Framework:OSINT framework focused on gathering information from free tools or resources.
- exiftool
- dirb
- nmap
- awesome-osint: A curated list of amazingly awesome OSINT.
- IntellTechniques: IntelTechniques Search Tool