OSINT Resources

OSINT Resources

Discover our curated collection of tools, guides, and resources for effective intelligence gathering and threat analysis

Maltego
Data Visualization
Interactive data mining tool

An interactive data mining tool that renders directed graphs for link analysis. Used for investigations on the internet and finding relationships between pieces of information.

Link AnalysisVisualizationData Mining
Shodan
Search Engine
Search engine for internet-connected devices

A search engine that lets users find specific types of computers connected to the internet using a variety of filters. Great for finding vulnerable systems and services.

IoTVulnerability ScanningSearch
TheHarvester
Information Gathering
Email and subdomain harvesting tool

A tool designed to gather open source intelligence on a company or domain, collecting emails, names, subdomains, IPs, and URLs from different public sources.

Email HarvestingSubdomain EnumerationOSINT
SpiderFoot
Reconnaissance
Automated OSINT framework

An open source intelligence automation tool that integrates with over 100 data sources to gather intelligence about IP addresses, domain names, emails, and more.

AutomationReconnaissanceIntelligence Gathering
OSINT Framework
Resource Collection
Collection of OSINT resources

A web-based interface that links to various OSINT tools and resources, organized by category. A great starting point for any investigation.

Resource CollectionDirectoryReference
Metagoofil
Metadata Analysis
Document metadata extraction tool

A tool for extracting metadata from public documents (pdf, doc, xls, ppt, etc.) available on target websites. Helps identify usernames, software versions, and more.

MetadataDocument AnalysisInformation Leakage
OpenCTI
Threat Intelligence Platform
Open source threat intelligence platform

An open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It's designed to structure, store, organize and visualize technical and non-technical information about cyber threats.

CTIThreat IntelligenceKnowledge Base
MISP
Threat Sharing Platform
Malware Information Sharing Platform

An open source threat intelligence platform for gathering, sharing, storing and correlating Indicators of Compromise of targeted attacks, threat intelligence, financial fraud information, vulnerability information or counter-terrorism information.

Threat SharingIOCsCollaboration
Recon-ng
Reconnaissance Framework
Web reconnaissance framework

A full-featured reconnaissance framework designed with modularity, ease of use, and speed in mind. It provides a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly.

ReconnaissanceWeb IntelligenceModular Framework
Amass
Network Mapping
Network mapping of attack surfaces

The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

Attack SurfaceNetwork MappingSubdomain Enumeration
Photon
Web Crawler
Fast web crawler for OSINT

Photon is a fast web crawler designed for OSINT. It can extract URLs, emails, social media accounts, files, and more from a website, helping investigators gather intelligence efficiently.

Web CrawlerData ExtractionIntelligence Gathering
IntelOwl
Threat Intelligence
Threat intelligence analyzer

Intel Owl is an Open Source Intelligence, or OSINT, solution to get threat intelligence data about a specific file, an IP or a domain from a single API at scale.

Threat IntelligenceAPIAutomation
Censys
Search Engine
Search engine for internet devices and certificates

Censys is a search engine that allows computer scientists to ask questions about the devices and networks that compose the Internet. It continuously monitors the Internet to create a database of hosts and websites.

Internet ScanningCertificate SearchDevice Discovery
Google Dorks
Search Technique
Advanced Google search queries

Google Dorks are advanced search queries that use Google's search operators to find specific information that isn't readily available through simple searches. They're powerful tools for OSINT investigations.

Search OperatorsInformation DiscoveryGoogle Search
Wayback Machine
Web Archive
Internet archive of websites

The Wayback Machine is a digital archive of the World Wide Web that allows users to see archived versions of web pages across time. It's invaluable for researching historical website content.

Web ArchiveHistorical ResearchContent Recovery
Sherlock
Social Media
Username search across social platforms

Sherlock is a tool that hunts down social media accounts by username across various social networks. It's useful for finding a person's digital footprint across multiple platforms.

Username SearchSocial MediaDigital Footprint

Can't Find What You're Looking For?

If you're looking for a specific tool or resource that's not listed here, let us know. We're constantly updating our collection based on community feedback.