Quick Launch — Top Tools
Shodan
Search engine for IoT devices, servers & industrial systems.
OSINT Framework
Comprehensive mind-map of OSINT tools organised by category.
Have I Been Pwned
Check if your email or phone appeared in a data breach.
Hunter.io
Find professional email addresses for any company.
Maltego
Graphical link analysis and data mining platform.
Wayback Machine
Browse 860+ billion saved web pages across history.
VirusTotal
Analyse URLs, IPs, files and domains for malware.
Censys
Internet-wide scanning — certificates, hosts, websites.
People Search
12 tools
🔎SpokeoPeople & contact lookup
👁️TruePeopleSearchFree people search
⚡FastPeopleSearchInstant people lookup
🌐PiplDeep web people search
📖WhitepagesPhone, address & people
🗂️ZabaSearchFree people search engine
✅Instant CheckmateBackground check service
📋InteliusPeople finder & background
🔭PeopleFinderAddress & phone search
📞411.comPhone & address lookup
🛡️BeenVerifiedComprehensive background checks
👥ThatsThemReverse email/IP/name lookup
Username & Social Media
14 tools
🏷️NamechkUsername availability checker
🔍WhatsMyNameUsername enumeration across sites
👤UserSearch.orgSearch username on 2000+ sites
📡Social SearcherSocial media search engine
🌟KnowEmUsername on 500+ social networks
🐦X (Twitter) SearchAdvanced tweet search
📸InstagramProfile & tag search
💼LinkedIn SearchProfessional profile lookup
🐙GitHub SearchCode, users & repos
🤖Reddit SearchPosts & user profiles
🇷🇺VKontakteRussian social network
✈️TelegramChannel & user search
🎵TikTokVideo & user search
👻SnapchatStory & map search
Email Investigation
10 tools
🎯Hunter.ioFind & verify email addresses
💥Have I Been PwnedEmail in data breach check
📊EmailRepEmail reputation & risk score
🔌Snov.ioEmail finder & verifier
📐Email FormatCompany email format lookup
✅Verify EmailFree email validation
🧙Voilà NorbertFind anyone's email address
🌤️SkyMemSearch email in databases
🕵️EpieosOSINT by email — accounts & leaks
📮Melissa Email CheckEmail verification service
Phone Number Lookup
8 tools
📞TruecallerGlobal phone number lookup
🕵️Spy DialerFree reverse phone lookup
🔢NumLookupFree phone number lookup
✅Phone ValidatorPhone line type & carrier
📖Whitepages ReverseReverse phone directory
📡CallerID TestCaller ID verification
🔧Twilio LookupPhone type & carrier API
🗂️SearchPeopleDirPhone & people directory
IP, Domain & Network
16 tools
🖥️ShodanIoT & device search engine
🔍CensysHost, cert & website scanner
🌳DNSDumpsterDNS recon & subdomain map
👁️ViewDNSReverse IP, WHOIS, DNS lookup
📋Who.isDomain WHOIS lookup
📍IPInfo.ioIP geolocation & ASN info
🛡️VirusTotalURL & domain malware scan
🔬URLScan.ioSandbox URL scanner
🔑SecurityTrailsDNS history & domain intel
📡RobtexIP/DNS graph-based lookup
🗺️Hurricane Electric BGPASN, BGP & routing data
🚨AbuseIPDBIP reputation & abuse reports
⚠️TIPThreat intelligence platform
📊DNSlyticsReverse DNS & analytics
📜crt.shCertificate transparency log
🌍RIPE NCCIP & ASN registration data
Image & Video Analysis
10 tools
👁️TinEyeReverse image search engine
🔍Google ImagesReverse image search
🇷🇺Yandex ImagesPowerful reverse image search
😶PimEyesFace recognition search
🪟Bing ImagesReverse image & visual search
🔬FotoForensicsImage manipulation detection
📷Exif.toolsOnline EXIF metadata viewer
📹YouTube DataViewerVideo metadata & thumbnails
🔍Photo ForensicsError-level analysis tool
🎬InVID PluginVideo verification browser plugin
Geolocation & Maps
10 tools
🌍Google EarthSatellite imagery & 3D maps
🪟Bing MapsBird's eye view & streetside
📌WikimapiaCollaborative mapping project
🛰️Sentinel HubSatellite EO data browser
3️⃣What3Words3-word GPS coordinate system
🗺️OpenStreetMapOpen-source world map
📍GeoHintsGeoGuessr-style geo clues
📍Google Maps Street ViewStreet-level imagery
🌿Sentinel PlaygroundMultispectral satellite imagery
🌦️Zoom.EarthReal-time satellite weather maps
Dark Web Research
6 tools
Dark web research carries legal and safety risks. Always use Tor Browser and take operational security precautions. Only visit .onion sites for legitimate research purposes.
Business & Corporate
10 tools
🌐OpenCorporatesWorld's largest open company database
📜SEC EDGARUS public company filings
🇬🇧Companies HouseUK company register
🪟GlassdoorCompany reviews & salary data
📊CrunchbaseStartup funding & company info
💼LinkedIn CompaniesCompany profiles & employees
📋Dun & BradstreetBusiness intelligence & credit
✅BBBBusiness ratings & complaints
🔍ZoomInfoB2B contact & company data
💰ICIJ Offshore LeaksPanama/Paradise Papers database
Documents & Data Leaks
10 tools
📁DocumentCloudJournalist document repository
📋PastebinText & code paste site
📚ScribdDocuments & book repository
🌊WikiLeaksClassified document archive
📡Intelligence XPaste & leak search engine
⚖️CourtListenerUS court opinions & records
📜PACERUS federal court records
🔍WikiLeaks SearchSearch WikiLeaks archive
🗝️DeHashedData breach search engine
🚨BreachDirectoryBreach data lookup
Google Dorks — Quick Reference
Most Used📂 File Type Searches
site:example.com filetype:pdf
site:example.com filetype:xls
site:example.com filetype:doc
site:example.com filetype:txt
🔑 Sensitive Info
intitle:"index of" passwords
inurl:admin site:example.com
intext:"confidential" site:example.com
ext:env DB_PASSWORD
📧 Email Harvesting
site:example.com intext:"@example.com"
intitle:"staff" site:example.com email
inurl:"contact" site:example.com
🗺️ Directory Listing
intitle:"index of /"
intitle:"index of" inurl:ftp
intitle:"index of" mp3
intitle:"Apache Status"
🔧 Login Pages
inurl:login site:example.com
inurl:wp-admin site:example.com
intitle:"Login" site:example.com
inurl:"admin/login"
📸 Camera / IoT
intitle:"webcam" inurl:view
intitle:"Live View"
inurl:":8080" intitle:"webcam"
News & Archive Research
8 tools
📚Wayback MachineHistorical website snapshots
📡GDELT ProjectGlobal news event database
🗞️Google NewsAggregated news search
📰Newspapers.comHistorical newspaper archive
✅FactCheck.orgPolitical fact-checking
🔍SnopesFact-checking & hoax debunking
💾Archive.phSave & share web page archives
🖥️CachedViewView Google cached pages
Threat Intelligence
10 tools
🦠VirusTotalMalware & URL analysis
🔬Hybrid AnalysisFree malware sandbox
▶️Any.runInteractive malware sandbox
👽AlienVault OTXOpen threat intelligence community
🕷️ThreatCrowdIP/domain threat search
💨GreyNoiseInternet noise & scanner tracking
📧MXToolboxEmail & DNS diagnostics
⛏️ThreatMinerData mining for threat intel
📊PulsediveCommunity threat intelligence
🚫Abuse.chMalware & botnet tracking
OSINT Investigation Methodology
1
Define the Objective
Clearly identify what you are looking for, who the target is, and what the legal authorization for the investigation is. Document your scope.
2
Passive Reconnaissance
Gather publicly available data without directly interacting with the target. Use WHOIS, social media, web archives, and search engines.
3
Active Information Gathering
Use tools like Shodan, DNS enumeration, and certificate searches. Be mindful that active scanning may leave traces.
4
Analysis & Correlation
Correlate gathered data, build a picture of the target using link analysis tools like Maltego. Identify gaps and pivot points.
5
Verification & Validation
Cross-check findings across multiple sources. Never rely on a single data point. Use fact-checking and image verification tools.
6
Documentation & Reporting
Record all findings with screenshots, timestamps, and source URLs. Use tools like Hunchly or CherryTree for structured note-taking.
Explore More
Tools Directory
Detailed profiles of CLI & GUI tools including installation and usage commands for Sherlock, SpiderFoot, theHarvester, Maltego, Recon-ng, and more.
OSINT Guides
Step-by-step investigation guides, Google Dorks, social media OSINT, dark web research, geolocation, and more.
Learning Resources
Curated courses, books, podcasts, YouTube channels, CTF labs, and OSINT communities to sharpen your skills.