For

OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
Backmoji Fluid Bulk Facebook Account 4Chan Active Constella Address Adult Friend
Iranian Service Analyze ID Castrick Clues Alexa AlienVaultOTX AlienVaultOTX Analyze ID Built With 2Lingual 411 192 CV Maker Amazon Baby Bing Maps AIHIT 0 Bin Snapchat Tool Bing Videos Data ID Finder Analysis Dinsta Board Reader Search Hunter Auto Check Validation Finder 5 Escorts
Facebook Email
Address Search Adult Friend
Advanced (May Need to Finder
Check Bing IP (ip: Background Base64 Encode DownloadGra Dehashed Username
Chinese Service Castrick Clues Usernames AlienVaultOTX <IPv4>) Any.run Built With Censys Advangle 800 Notes Checks Indeed Amazon Wedding Camera Trace Asset Locator Cl1p Baidu Images ClipConverter Email) All My Tweets m ClubhouseDB 4Chan Archive Domain Aviation Page Bitcoin Abuse Search Bed Page
eBay Advanced
Username Canary Background Facebook Deleted Tweet 4Chan Archive Dehashed Boat Info Bitcoin Ashley
Russian Service Cynic Search Archive IS Tokens Cryptome DomainIQ Driftnet Ahmia Checks Classmates Ripoff Report Kohl's Wedding Classic Maps B2B Hints Code Pad Bing Images Google Videos Search Matrix Finder Gramho Go Find Who Alternate Email World Balance Madison City of Love
URL needs editing to
include selector/IoC - Identify &
Unique Bypass
identifier/search Clear Channel YouTube
term enclosed in < > America Phone Family Tree Billboard Country IntelX Google 4Chan Archives Dehashed Bitcoin
brackets DeHashed Go Find Who Backlinks Censys EchoTrail Nerdy Data FOFA Archive Today Book Now My Registry Directory BinDB Code Paste Camera Trace Restriction Facebook First Follower Gramsave Takeout Search Hash Carfax Received Badoo City X Guide
Hacker News
Username Fast People Birthday First Tweet - 4Chan Google Christian
Downloadable Tool Domain Big Data Search Built With Exonerator Exifinfo SpyOnWeb Shodan Baidu Bing Search Registry Finder Descartes Labs Database Control C Carbon 14 Internet Archive Sowdust Keyword IG Audit HashAtIt Search Dehashed IP Carvana Bitcoin Sent Mingle Craigslist Girls
Companies Compress or Dehashed Bitcoin Who's
Dead Link Email Format KnowEm Carbon 14 FOFA ExifTool Synapsint Bing Bulk Solutions Find A Grave Target Baby Dual Maps House Debian Die KeepVid StalkScan FollerMe IGStorie Kik User Query Board Reader Name Cazana Who eHarmony Eros
Odnoklassniki
DuckDuckGo Google Search
Bing Advanced Find People Maps (Uses Faceagle Facial (Russian Social Dehashed
Email Hippo LoL Archiver Carbon Dating Get Notify Extract Metadata Search Caller ID Test Search Target Wedding Apple Maps) CrunchBase Doxbin Recognition KeepVid Pro Thao.pw Followerwonk IGStorie URL Network) Craigslist Password Check That VIN Blockchain Elite Singles Escort Ads
Qzone Google
FaceCheck Search
Facial UK OSINT Hootsuite (Chinese Social Dehashed
Email Rep Lullar Censys Hunter.how FOCA Bing Translator Caller Smart Go Find Who The Bump EchoSec DueDil Dpaste Recognition LiveLeak Facebook Feed Instadp Network) Disboard Phone Cycle VIN BlockChair Farmers Only Escort Fish
I Know What
You How Many of Family Watch Who Posted Instagram Reddit Dehashed Department of BlockChair
Epieos Phone & Email Lookup Name Checkr CentralOps Download Free OCR Dark Search Carrier Lookup Me The Knot Flickr Map Dog Dpaste.org Flickr API LiveStream What Omnisci Public Alert Investigator Discord Me Username Transportation Wallet Search Friendfinder-X Escort Index
Renren Blog
Facebook Email Address DarkNetLive Dark Google Search
Search (May Need to Base64 Web Markets One Million (Chinese Social eBay Complete Elasticsearch DVLA Vehicle OnChain
Encode Email) NameVine DMNS IBM X-Force Get Metadata (Clear Web) Castrick Clues Intelius Flippity Felon Spy Dumpz Flickr Map LiveU Tweet Map Instaview Network) Search Crawler Check Industries Match Humaniplex
Renren Google
DarkNetLive Dark Metadata & Search
Pinterest Web Markets Reverse Image (Chinese Social eBay Keyword
Flickr API Username DNS Dumpster IP Logger Global File Search (Tor) Dehashed John Doe Free Map Tools FOIA Search Fedora Forensically Search Sleeping Time Search My Bio Network) Search Go Find Who FaxVin Synapsint OK Cupid iBackPage
Renren Page
Epieos Phone Google Search
Daum (South & Email High OnlineConverte (Chinese Social eBay Sold Have I Been NICB VIN Wallet
Ghost Project Profilr DNS Trails IP2Location Gray Hat Warfare Korean) Lookup Land Registry GeoSpy Programmer Friend Paste Foto Forensics r Social Bearing StalkFest Network) Search Pwned Email Check Explorer Plenty of Fish One Back Page
Renren Zhan
Pushshift Google Search Have I Been
Reddit User DNSReaper Meetup Name (Chinese Social Pwned Open Adult
Go Find Who Search Web IPLocation Hybrid Analysis DeepL Escort Index Search Go Find Who Import Yeti Frubar Google Images Periscope SparkToro Storiesig Network) eBay User Username Plane Finder Tinder Directory
Pushshift
Reddit User Hudson Rock
Submission Domain Big Inmate Imgur Skype Search eBay User Cybercrime Tinder Profile
Gravatar Search Data Joe Sandbox IBM X-Force DuckDuckGo Everyone API Nuwber Google Maps Location GitHub Subreddit Petey Vid Status People Story Saver Engine Feedback Tools Records Finder Search Preferred 411
Judy Records
Reddit User Fast People People By (US Court Smaller eBay User
Have I Been Pwned Search DomainIQ MXToolbox ISSUU Exalead Search Name GPS Visualiser Docs) Hastebin Jeffrey's Viewer TikTok Synapsint Networks CSE Followers IntelX Domain Reverse Genie Zoosk SipSap
Skype Free Carrier Karma Decay TV News eBay User Skip The
Hunter Username Easy Counter Phishtank Jeffrey's Viewer Global File Search Lookup People Finder Here Land Registry Hey Paste It (Reddit) Archive Tinfoleak Snapchat Maps Following IntelX Email Search Quarry Games
Social Media
Find Sub People Search Analysis Tool eBay User
IntelligenceX Social Searcher Domains PulseDive Joe Sandbox Goo (Japanese) Google Now Historic Aerials Lead Ferret Hpaste Let's Enhance Twitch Trendsmap (SMAT) Items IntelX IP Vehicle History Slixa
NSFW Reddit eBay
Tinder Profile People Trace Instant Street Reverse Image Social Username IntelX
IP2Location Search FOFA Rapid DNS Napalm FTP Google Info Tracer UK View Legacy Ideone Search VaughnLive Truth Nest Networks CSE Search Username Vin Decoderz Stripper Web
Online
User Search Follow That Google Advanced Barcode Video Closed Leak Probe The Erotic
Leak Probe (Free) Page Shodan OnlineOCR Search John Doe Pipl Land Viewer Melissa Data Ivpaste Reader Captions Tweet Beaver Social Searcher FakeSpot Email VinCheck Review
Taringa
Community
User Search Public Mail Posts (Spanish Leak Probe The Other
Leaked Source (Paid) Google Cache Synapsint OpenBuckets Google Groups Numpi Records Landsat Look Money Line JSBin OnlineOCR YouNow Tweet Deck Social Network) Flippity Username Board
Taringa Images
Google Input Open (Spanish Social
Lullar User Sherlock Hunter That's Them Pastebin Tools Nuwber Public Records Map Box Corporates Just Paste It Pictriev YouTube Tweet Mapper Network) GoofBid Leak-Lookup TNA Board
PimEyes Facial YouTube Taringa Posts
Voat User Google News Recognition Channel (Spanish Social
Many Contacts Search Hunter.how Threat Crowd PDF Drive Archive OK Caller Radaris Map Channels Open Secrets KDE Search Crawler TweetTopic Network) Hacker News LeakCheck TS Escorts
Google YouTube Taringa Shouts
What's My Newspaper Old Phone Search People Comment (Spanish Social Hacker News
MX Toolbox Name IBM X-Force ThreatMiner Prezi Archive Book Free Mapillary PACER Lisp Root About Scraper Twiangulate Network) Google Search LeakPeek
Telegram Chat
Information YouTube Referrer Hacker News PSBDMP
OSINT Industries Laundromat Ultra Tools Pushshift Google Patents Open CNAM Social Searcher Mashed World RECAP Mystic Paste Snapchat Geofind Twitonomy Search Text Search Domain
Meetup Twitter Telegram Link Hacker News
OSINT Location Advanced Referrer User
Pastebin Dump Joe Sandbox URL Biggy Scribd Google Scholar Industries Spokeo Search ReversePP No Paste TinEye Search Search Comments PSBDMP Email
Selective Wolfram Image Telegram
ViewDNS IP OSINT Service Identification Twitter Message Hacker News
Public Mail Records Majestic Location Slide Share Google Translate Industries Spytox On The Market Verification Open Use Project Archive Search User Favourites PSBDMP Hash
ViewDNS IP People Search Open Street Social Security Telegram Hacker News
Records Finder MXToolbox TraceRoute Slidebean I Search From Now That's Them Cam Death Index p.ip.fi Yandex Images Twitter Audit Search User Posts PSBDMP IP
Hacker News
ViewDNS IP IACA Dark Web True People Open Street Twitter Bio Telegram Username
Search People Free Pentest-Tools WHOIS ThreatMiner Tools Phone Owner Search Map SSN Validator Paste HTML Changes Stats/Search Search PSBDMP Name
ViewDNS Port Reverse Telegram t.me Imgur PSBDMP
SpyCloud Phishtank Scanner VirusTotal Keyword Tool Lookup Truth Finder Right Move UniCourt Paste Link Search Subreddit Password
Library of Telegram
Plagiarism ViewDNS Congress US US County telegra.ph Meetup Event PSBDMP
Spytox Checker Reverse IP News Directory Search Bug UFind Scribble Maps Court Records Paste.ee Search Search Phone
US County
List of Tor .onion Search People General Meetup Google PSBDMP
Synapsint PulseDive VirusTotal Services Free WebMii Shade Map Records Paste.org Telegram.im Search Username
Tlgrm
Telegram Meetup
Service Objects US Voter Channel Location
That's Them Rapid DNS WhoIs Mamont (API) Whoodle Snapchat Databases Paste.org.ru Search Search Scylla
Reddit Tumblr Google Meetup Name
ThreatMiner Domains Wigle Million Short Spy Dialer XLEK Twiangulate VINELink Paste2 Search Search Snusbase
Reddit Site Meetup Post
Trace My Email Address Search Napalm FTP Spytox Yasni Wikimapia Voter Records Pastebin.ca Search SpyCloud Email
NSFW Reddit
Redirect World Imagery Reverse Image
TruMail Detective Nerdy Data Synapsint Zaba Search Wayback Pastebin.fr Search
Redstatz
Reddit Site Newspaper
Verify Email Search Archive Sync.me ZoomInfo Yandex Maps Pastebin.gr OfferUp
Registration Pinterest
Verify Email Addresses Archive Not Evil (Onion) That's Them Zillow Pastebinz Boards Search
RiskIQ Not Evil Pinterest
WHOIS Mind PassiveTotal (Tor2Web Proxy) True Caller Zoom Earth PasteFs Google Search
Not Evil True People Pinterest Pins
Whoxy Search Metrics (Tor2Web URL) Search Zoopla Pastie Search
Old Fulton (US & Pinterest User
Shared Count Canada) Twilio Pound-Python Boards
Pinterest User
Similar Web Onion Link US Phonebook Private Bin Followers
Pinterest User
Spy On Web Parseek (Iranian) White Pages Slexy Following
PROMT Online Pinterest User
SpyFu Translator Who Calld Snipplr Pins
Pinterest
Synapsint Qwant Yandex Snipt Username
Search Engine
Threat Crowd Collossus Yellow Pages Sprunge Pushshift
Pushshift
Threat Reddit
Intelligence Comment
Platform Search Whisperer Zabasearch Text Snip Search
Pushshift
Reddit
Comments in
Subreddit
ThreatMiner Searx Tidy Pub Search
Pushshift
Reddit User
Unshorten It Start Page Ubuntu Search
Pushshift
Reddit User
Search Time
Unshorten Me Tor2Web Wordle Defined
Pushshift
Reddit User
Wayback Submission
URLScan Machine Zerobin Search
ViewDNS IP
History Yahoo Groups Reddit Map
ViewDNS Port Reddit Post
Scanner Yandex Title Search
ViewDNS
WHOIS Reddit Search
Reddit Site
VirusTotal Search
Reddit
Subreddit
Visual Ping Search
Visual Site Reddit User
Mapper Search
Voat Domain
Search Reditr
Wayback Redstatz Reddit
Machine Site Search
Website
Informer Riot
Whoisology Rocket Chat
Search
Whoxy Tempest
Slack Channel
Strava Heat
Map
Tox
Unddit
Voat Domain
Search
Voat Google
Search
Voat Subverse
Page
VoaT Subverse
Search
Voat Text
Search
Voat User
Search
 For
OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
 For
OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
 For
OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
 For
OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
 For
OSINT/Threat
My book Cyber Intelligence
For suggestions, comments or
Authored and Threat My book from Research Book a discovery call
changes please use the
maintained by Intelligence is Amazon US enquiries, with me to discuss
contact page https://www.
AaronCTI - https: available here affiliate link is please contact your intelligence
perspectiveintelligence.co.
//aaroncti.com (Amazon UK available here me via https: needs here
uk/contact-us/
affiliate link) //perspectivei
ntelligence.co.
uk
Paste Sites
Search Engines (search via
Cookies/Analytic Web (Clear & Dark Phone People Public search Online Data
Key Email Address Username Domain IP Address Files/Documents IDs Technology/IoT Web) Number Search CV/Resumes Weddings/Babies Geolocation Records engine) Images Videos Audio Facebook Twitter/X Instagram Other Social Communities Breaches Vehicles Crypto Dating Sites Prostitution
 Name Description
AsINT Collection start.me list of OSINT resources, broken down into sections.
OSINT Techniques OSINT Tools List of social networking search resources.
Technisette Comprehensive collection of search resources including browser addons, databases, search engines, tools and tutorials.
SANS OSINT Resources Collection of resources to help understand and improve OSINT knowledge and collection.
Digital Forensics Tips Includes blog posts about using AWS to further OSINT capability. Very useful.
Awesome OSINT Extensive collection of OSINT/CTI investigative resources.
Bellingcat Online Investigation Toolkit List of resources used by Bellingcat for their own investigations
Ultimate OSINT Collection An extensive start.me collection collecting all other useful OSINT resources
OSINT for Finding People OSINT resources specifically for trying to trace or find individuals. Very useful for things like Trace Labs
CTI Start.Me start.me list of resources that can be used for cyber threat intelligence.
Intelligence Fusion OSINT Tools Collection of recommended OSINT tools for various types of research.
APT & Cybercriminal Campaign Collection Extensive and historical collection of reports on APT and cybercriminal campaigns.
OSINT Me Regularly updated blog containing posts relating to OSINT, including how-to guides.
Plessas Academy Extensive resource and review of tools that can be used for OSINT. Small $5 USD per month subscription cost.
Offensive Security Cheatsheet Collection of OSINT, technical and pentesting resources.
nixintel's OSINT Resource List start.me list of OSINT resources, broken down into sections.
Sinwindie's OSINT Collection Collection of OSINT resources, tools, bookmarks etc.
OSINT Framework Useful tool for working through data types and finding sources to enrich an OSINT investigation.
CyberSecStu's OSINT for Missing People Doc Stu from The Many Hats Clubs OSINT resources for missing persons investigations.
Anti-Money Laundering Toolbox Start.Me AML list of different resources.
Awesome Telegram OSINT Collection of OSINT resources for Telegram.
UK OSINT Super useful collection of different resources for investigators. Explains each source too which is very helpful.
Dark Web Search Tools Collection of dark web search resources.
Swiss Online Investigative Toolkit Collection of resources for investigating entities in Switzerland
Global Investigative Journalism Conference Resources List of resources from the GIJN 2021 conference
Addons start.me list of browser addons and extensions
Custom Search Engine Utopia Start.me list of Google custom search engines
OSINT Framework DE - FININT start.me list of FININT resources for investigation
Cryptocurrency Investigation start.me list of cryptocurrency investigation resources
OSINT South Africa start.me list of OSINT resources for South Africa
Dark Web Search Resources by osintme Collection of different OSINT resources for dark web research by osintme
Attack Surface Diagrams Workflows for conducting OSINT against different areas by OSINT Dojo/Sinwindie
Forensics Resources List of resources for forensics resources
 Tool Description Comment
Spiderfoot API-based bulk search tool. Extremely useful for running searches against multiple resources at once. Available as open-source or on commercial cloud basis. Needs time to configure and setup API features, but well worth it.
Twint Twitter search and scraping tool. Doesn't require API and can pull back nearly all tweets relating to defined search. Very easy to setup and run from command-line, can also be used with ELK stack for graph visualisation and analysis.
H.I.N.T.S Command-Line tool that creates an easy-to read, professional-looking report template based on individuals. Minimal setup needed, creates a strong report based on question/answers provided in CLI. Great for creating quick OSINT reports on individuals.
Mitaka Browser extension for OSINT research. Can refang and search IOCs against a number of resources. Very cool.
Dead Trap OSINT tool for finding information on a phone number. Windows requires installation of Geckodriver.
DNS Viz Tool for analysing and displaying DNS behaviour. Also available as an online search tool at dnsviz.net.
Azure Facial Recognition Tool for comparing if a face in two different images is the same person. Useful for quickly comparing imagery from social media to see if an account is the person you're looking for.
Recon Spider CLI-based OSINT framework covering a wide range of individual selectors or metadata. Linked page looks easy to use and update, but no GUI or export options at this time it seems.
IntelX Extensive range of intel tools for OSINT and CTI analysis. Has a wide range of tools and very useful, also has paid options.
Save Telegram Search History Chrome browser extension for saving Telegram data. Saves files in plain text, so images, audio and video not captured. This has also been pulled from the Chrome web store, so maybe use with caution?
Fabled Owl Scrape Telegram users or chat history for further analysis offline. Requires either TamperMonkey (Chrome) or GreaseMonkey (FireFox) to be installed on a desktop machine. It will scrape content from the web version of Telegram.
Recon-Ng Open-Source web framework for conducting web-facing reconnaissance for pentesting. Comes bundled with Kali Linux.
Fierce DNS recon tool for locating non-contiguous IP space. Useful for early-stage research when you don't know the full network layout.
DNSRecon Another DNS recon tool for early-stage research. Comes bundled with Kali Linux.
Tafferugli Twitter analysis web service tool. Visual analysis of Twitter, including automated posting and co-ordinated tweets.
Social Scan Email OSINT tool for checking email addresses against popular websites. Claims to be more accurate than other email search engines. Looks promising.
H8Mail Tool for checking email addresses against data breaches. Has a number of API integrations that can check for data breach information. Full instructions here: https://khast3x.club/posts/2019-08-14-h8mail_2.3-release/
GHunt Tool that pulls back all available information relating to a Gmail account, including devices, location and photos etc. Similar to Epieos but in terminal form. Powerful stuff for finding information from Google accounts.
ProtOSINT Provides account and IP validation for ProtonMail and ProtonVPN IP addresses. Can also generate potential email addresses for the target based on data input.
NCC Group Cloud IP Ranges Checks if an IP address is in known cloud IP address lists. Cover the majority of major cloud service providers. Could be useful for checking out IPs quickly.
EXIF Extractor Extracts metadata from image files and places them into a CSV file for easier analysis. Useful for photos and for conducting analysis rather than viewing the metadata within an image viewer.
Holehe Searches sites to see if an email address is registered against it utlising forgotten password method. Looks great for quickly checking email addresses against major websites.
OSINT Search Operators Shodan and Google search operators to aid OSINT investigations. Great quick and easy resource for specific searching.
Multi-Cloud OSINT Tool Tool to enumerate public resources in AWS, Azure and Google Cloud. Highly-useful for checking cloud-based services for any useful information.
Fake SMS CLI tool for getting around SMS verification by using a temporary number that acts like a proxy. Haven't tested but could be extremely useful for sockpuppet creation.
Ignorant Python-based CLI tool for checking a phone number against several different social and large websites. Doesn't alert target phone number, so could be incredibly useful for quickly checking a number against various services.
O365 Domain Check Python script by Nixintel to check if a domain has an O365 instance and returns details. Useful for OSINT recon as well as pen testers.
Profil3r Python-based OSINT tool for quick enumerations of names, email addresses and usernames etc. Could be useful for verifying partial email addresses and such.
Email OSINT OSINT tool for matching email addresses to online accounts Useful for quick search and verifying an email against various platforms.
Social Pwned Tool for searching social media posts for email addresses and checking data breach information Useful for checking if a target has previously shared an email address across their social media platforms.
CyberChef GCHQ developed tool for supporting data analysis, encoding, compression and encryption Can be downloaded or run in web browser. It's a super useful tool that can really help with getting the most from the data you have.
CyberChef Recipes Useful recipes for conducting OSINT using CyberChef Super helpful for getting the most out of CyberChef, and can save time as plenty of cyber/OSINT recipes ready to go.
CloudFlair Find the actual IP of CloudFlare addresses through certificate use Could aid in decloaking a true IP address for a CloudFlare site.
DeepDarkCTI Collection of resources for deep and dark web research Can aid investigations into forums, actors, messenger platforms and ransomware groups.
Facebook & Instagram OSINT FireFox add-on to derive useful information from Facebook and Instagram Helpful for getting user IDs and potentially email addresses/phone numbers, mutual friends etc.
Kik Toolset Tool that can return obfuscated email addresses, deleted accounts etc Could be a super useful tool for OSINT investigations where the target uses Kik.
Carbon14 Python tool to identify when a webpage was last modified. Great blog by Nixintel describing the tool and its usage here.
Xeuledoc Python app for searching Google documents to identify the owner. Could be useful when investigating villains. Doesn't work on Google forms though :(
Investigator HTML-based lookups for website information including certificates, subdomains and more Looks like a great way to run checks on a website with ease. Definitely using it going forward
HostSpider Python tool for enumerating domains, subdomains, WHOIS, CloudFlare etc. Very quick and easy according to Sector035.
Sterra Tool for identifying mutual follows and close contact of Instagram profiles Looks very helpful for identifying close friends of people on Instagram.
OSINT Tools Map Map of different OSINT tools for specific areas presented in map view. Great for finding resources for a particular region or area, currently has 400+ resources.
Taranis NG OSINT Tool for CERT and CSIRT teams for gathering information. Has several useful features, definitely a tool to keep an eye on. Supported by Slovakian National CERT.
Email2PhoneNumber Python tool for identifying a phone number from an email address. Could be incredibly helpful where you have a partial number to compare against or for finding new information on a target.
Toutatis Python tool for extracting email addresses, phone numbers and bio details from an Instagram profile. Need to test but if it can get the email addresses and phone numbers it could be an invaluable tool for people OSINT.
APT Groups & Operations Spreadsheet that tracks APT group reporting, naming conventions etc Useful if you are unsure about who a group is or who different vendors refer to them as. Also has links to reports of activity which is always helpful.
TikTok Scraper Tool that uses the TikTok web API to pull data and metadata Allows you to download all sorts of information and media, could be incredibly useful for OSINT investigations
FilePhish Tool for generating Google dorks for files, databases and software against a given domain name Takes a lot of the legwork out of generating queries yourself so could be both a huge time save and incredibly useful for finding things you may otherwise miss.
Awesome Telegram OSINT Collated list of resources for conducting OSINT on Telegram Everything from Tools to blogs and other resources, likely to be very useful.
Frack Tool for end to end management of data breach data This is very helpful if you need to collate and search through data breach information in your day to day analysis.
IntelTechniques Search Tools Range of search tools created by Michael Bazzell Helpful if you haven't followed the steps in his books to create your own VM
OSINT Industries Web-based username, email and phone checker Probably the best enrichment source for email addresses and rivals other commerical products for phone and username
UK Car Partial Registration Search Python tool for checking vehicle registration numbers and pulling information from DVLA via API For UK investigations where a vehicle, its MOT status etc may be helpful this could be a really good way to identify partial plates and identify the subject
NumberPlateNumberWang Similar to the partial plate search, this will return results for a full registration number. Requires DVLA API For UK investigations where a vehicle, its MOT status etc may be helpful this could be a really good way to identify partial plates and identify the subject
ShoDomain Seeker Python tool for identifying subdomains for a provided domain using Shodan's API Great for potential attack surface, risk reduction or enumeration type tasks
Telegram Fraudster Glossary Glossary of terms common on Telegram fraud and underground channels Helps decipher some of the gibberish
FB2MKTP Script to go from Facebook user profile to a Marketplace account Helpful for identifying a users activity on Facebook Marketplace
Forensic OSINT Tool and browser extension for recording your investigations, downloading content and preserving data as it was when investigated Similar to Hunchly but more advanced, one of those tools that can be essential when you need an evidential chain or need to preserve data for later reference should it be removed from web pages
Hudson Rock Free Cybercrime Tools Free tools for checking domains, email addresses for compromises in addition to other tools Useful for understanding the source of a breach of if information stealer malware may have records of a domain being available
GitFive Python tool for understanding information about GitHub users Can identify accounts from email addresses, perform username enumeration and more
Blackbird Python tool for running username searches, similar to Maigret Has export options for PDF and CSV, in addition to fully integrating WhatsMyName so you can run locally
Maigret Another username enumeration tool which covers nearly 3000 different sites Very powerful username enumeration tool, also has a Maltego transform
Maigret Maltego Maltego Local Transform for running Maigret queries within Maltego Needs Maigret to be installed on the local machine, but allows quick and easy use from within all versions of Maltego
Scrapers'n'Bots Online Tools Collection of tools you can run in the browser for various OSINT purposes Great for enabling investigations where you can't leverage software or command-line tools
Netlas Cookbook Guide for conducting a range of different investigation types including OSINT, Crypto, fraud and phishing and more Section on identifying similar-looking webpages could be very helpful for fraud or phishing investigations particularly, and sections on scraping and different types of investigation could be a goldmine
CTI Vendor Mindmap Mindmap of different vendors to different capabilities Useful to help you see where crossover or unique capabilities may bolster your intelligence programme
 Type Name Description
Training OverTheWire Wargaming site for learning security concepts.
CTF CyberSoc OSINT CTF OSINT-based capture the flag.
CTF Trace Labs OSINT CTF Missing Persons CTF events ran by Trace Labs.
Quiz Sector035's OSINT Quiz OSINT quiz organised by Sector035.
CTF Intelligence CTF OSINT/CTI CTF.
Training Benjamin Strick's OSINT Training YouTube tutorials by Ben Strick/BenDoBrown.
Training Dark Web Investigating Dark web investigating for OSINT researchers by Sinwindie/OSINT Dojo.
Blog Writing OSINT for Journalism Blog on how to present OSINT investigations for journalistic purposes, ie blogs or Twitter threads.
Blog OSINT Treasure Trove Collection of blogs/articles/books on OSINT.
Blog Creating Sockpuppet Accounts Blog on creating sockpuppets that work by me (yes, shameless self-promotion).
Blog How to Get Into Intelligence Another blog by me on getting into intelligence as a profession.
CTF OSINT Dojo Aimed at encouraging people new to OSINT to learn new skills through gamification.
Blog OSINT with Google Sheets Blog on using Google Sheets to help with some OSINT processes.
Blog Email to Usernames Blog by Ginger T on pivoting from an email address to a username
Training CTI Lexicon Super helpful list of acronyms and other made up words used within a CTI context.
Blog Introduction to Yara Rules Excellent blog introducing the concept of Yara, how to use it and when.
Blog Chronolocation in Media Blog by Sector035 on how to tell time of day from images.
Blog The World of Wigle Excellent blog by GingerT on how to make the most out of WiGLE
Blog Investigating Scam Websites Fascinating insight into investigative process for looking at scam websites by Hatless1der.
Blog Audio/Visual Steganography Blog by Aleksander on how messages can be hidden within audio and visual files, focusing on audio
Blog 5 Telegram Tips Hat1ess1der's blog on doing OSINT on Telegram is full of useful tidbits of information on investigating the platform
CTF/Training Kase Scenarios Scenario-based OSINT investigations in a CTF-style training environment. Affordable, in-depth and incredibly well structured
CTF Hacktoria Another scenario-based OSINT investigation and CTF platform. Looks fantastic
Training Source Exploitation Guide Guide for conducting cyber threat intelligence research and analysis on adversary infrastructure
Blog GAIA ID to Email Address Guide to leveraging AI to help identify email addresses from Google IDs
Blog My OSINT Blueprint Part 1 First blog from me in a series looking at how I approach doing People OSINT investigations, including tools and ways of working
Training Pivot Atlas Super useful resource for figuring out how to pivot on different artefacts from cyber threat investigations
 Name Description
OSINT Stack Useful collection of browser bookmarks containing OSINT resources.
Facebook Friends Bookmarklet Bookmarklet for downloading an individuals' Facebook friends directly into a .csv file. Add the bookmarklet into the bookmarks bar, expand the friends list, click the bookmarklet and done.
OSINT Bookmarklets Collection of OSINT Bookmarklets by BOsintBlanc and Jake Creps.
OSINT Combine Dark Web Bookmarks Bookmark collection you can drag into a Tor browser to provide opportunities for OSINT on the dark web.
Criminal Forums/Chat List of hacker, criminal and carding forums for research and investigation by osintme.
 Changelog
12/08/2024: Added CTI Vendor
mind map to Tools, Facecheck
and Faceagle to Images
28/06/2024: Added Search
Whisperer to Search Engines
27/06/2024: Added Adult Friend
Finder Username Search to
Dating Sites, Information
Laundromat to Domains (Finds
similar looking webpages across
several resources), Clear Channel
Billboard Directory (Can identify
location of billboards by phone
number from imagery) to Geo
and Scrapers'n'Bots Online Tools
and the Netlas Cookbook to
Tools
25/06/2024: Added Deleted
Tweet Finder to Twitter/X
21/06/2024: Added Pivot Atlas to
Training/Learning section
05/06/2024: Added Castrick Clues
to Email, Phone Number and
Username, Added Epieos and
OSINT Industries to Phone
Numbers. Added OnChain
Industries to Crypto
04/06/2024: Added Blackbird,
Maigret and Maigret-Maltego to
Tools
15/05/2024: Added Hudson
Rock's Free Cybercrime Tools to
Tools and Data Breaches, added
GitFive to Tools
10/05/2024: Added DNSReaper
Web to Domains
08/05/2024: Added My OSINT
Blueprint blog to
Training/Learning
23/04/2024: Added EchoTrail to
Files/Documents
22/04/2024: Added OpenBuckets
to Files and Documents and
Driftnet to Web Technology/IOT
Search
30/01/2024: Added Forensic
OSINT to Tools
29/01/2024: Added LoL Archiver
to Usernames
05/01/2024: Added FB2MKTP to
Tools
02/01/2024: Added GeoSpy to
Geolocation
22/12/2023: Added Telegram
Fraudster Glossary to Tools
20/12/2023: Added ShoDomain
Seeker to Tools
27/09/2023: Added ReversePP to
Public Records
05/09/2023: Added
NumberPlateNumberWang to
Tools
10/08/2023: Added UK Car
Registration Search to Tools
18/07/2023: Added hunter.how
to Domains and IPs
10/07/2023: Added OSINT
Industries to Email Addresses,
Phone Numbers and Tools
05/07/2023: Added Source
Exploitation Guide to Training
28/06/2023: Added FOFA to
Domains, IPs and Web
Technology
22/06/2023: Added PulseDive to
Domains and IPs, Constella
Hunter and Snusbase to Data
Breaches, Kase Scenarios and
Hacktoria to Training/Learning
tab
28/02/2023: Added Forensics
Start.Me to Collated search
22/12/2022: Added Backmoji to
Images section
10/10/2022: Added Rapid DNS to
Domains and IP addresses
29/08/2022: Added 5 Telegram
Tips to Training/Learning
24/08/2022: Added Attack
Surface Diagrams to collated
resources and IntelTechniques
tools to Tools
07/08/2022: Added DNS
Dumpster to Domains
30/07/2022: Added YouTube
Geofind to videos
18/07/2022: Added osintme's list
of criminal forums to Bookmarks
07/07/2022: Added OSINT
Combine's dark web bookmark
collection to Bookmarks
16/06/2022: Added Dark Web
OSINT Resources by osintme to
collated resources
14/06/2022: Added Maltego Pro
free trial referral link to top
banner
31/05/2022: Added OSINT South
Africa to collated resources
23/05/2022: Added Map
Channels and updated Dual
Maps links in Geolocation
02/05/2022: Added Frack to Tools
29/04/2022: Added Leak Check,
LeekPeak and Leak-Lookup to
data breaches section
20/03/2022: Added
Cryptocurrency investigations
start.me to collated resources
13/03/2022: Added Let's Enhance
to Images
11/02/2022: Added FININT search
resource to collated search
resources
09/02/2022: Added Awesome
Telegram OSINT to Tools
05/02/2022: Added FilePhish to
Tools
23/01/2022: Added SpyOnWeb to
Cookies/Analytics section, Unddit
to Other Social and TikTok
Scraper to Tools
22/01/2022: Added Addons
StartMe link to collated search
resources and Mashed World to
Geolocation
21/01/2022: Added OnlineOCR to
Images and Files
20/01/2022: Added APT Groups &
Operations spreadsheet to Tools
17/01/2022: Added IACA Dark
Web Tools, List of .onion services,
DarkNetLive dark web markets
links for clear web and Tor to
Search Engines
10/01/2022: Added Aleksander's
blog on steganography to
Learning section and Swiss
investigative toolkit and the GIJN
'21 resources to Collated
resources
20/12/2021: Added Hatless1der's
Scam investigation blog to
Training/Learning section
17/12/2021: Added Toutatis to
Tools section
06/12/2021: Added DMNS and
Shade Map to Selector/IOC
search section, and GingerT's
blog on Wigle to
Training/Learning section
26/11/2021: Added Sector035's
blog on Chronolocation to
Training/Learning
25/11/2021: Added
Email2PhoneNumber to Tools
18/11/2021: Added Taranis NG to
Tools
17/11/2021: Added OSINT Tools
Map to Tools
12/11/2021: Added Sterra to
Tools
25/10/2021: Added HostSpider to
Tools
18/10/2021: Added Dark web
search resources to Collated
search
13/09/2021: Added Investigator
to Tools section and Facebook
Search Matrix, as well as
additional lookups for images
and geolocation
12/09/2021: Added Cazana to
Vehicles section
09/09/2021: Added UK OSINT to
collated search resources, and a
totally shameless affiliate link to
my book.
06/08/2021: Added Synapsint to
Selector/IOC search.
13/07/2021: Added Xeuledoc to
Tools.
12/07/2021: Added Carbon14 to
Tools.
17/06/2021: Added 4Chan
archive to other social section
and Kik Toolset to Tools.
16/06/2021: Added DeepDarkCTI
and Facebook & Instagram OSINT
to Tools
14/06/2021: Added Reddit
Investigator and ClubhouseDB to
Other Socials section, and
Cloudflair to Tools.
07/06/2021: Added CyberChef
and CyberChef recipes to Tools
section.
21/05/2021: Added Introduction
to Yara Rules blog in training
section.
18/05/2021: Added Awesome
Telegram OSINT to collated
resources.
16/05/2021: Added AML Toolbox
to Collated search resources and
added Gramho to Instagram
section on Selector/IOC search to
make it look less depressing.
15/05/2021: Added Account
Analysis for Twitter to
Selector/IOC search. Removed
Pub-db due to suspicious access
requirements. Also updated dead
links where I've found them. Sad
face.
10/05/2021: Added CTI Lexicon to
Training section and Go Find Who
to IOC/Selector search.
03/05/2021: Added several email-
based tools to Tools section.
29/04/2021: Added SMAT to
Other Socials section
21/04/2021: Added OSINT
Bookmarklets by BOsintBlanc
and Jake Creps to Bookmarks
section
15/04/2021: Added Ginger T's
blog on pivoting from emails to
usernames to Training section
13/04/2021: Added Nixintel's
O365 check script to Tools.
12/04/2021: Added Google
Sheets OSINT Blog to Training &
Learning section
09/04/2021: Added Reddit Map to
Other Socials section.
27/03/2021: Shamelessly added
some of my own blogs to the
training section.
24/03/2021: Added Ignorant to
Tools section.
20/03/2021: Added PimEyes to
image section.
16/03/2021: Added the Facebook
Friends bookmarklet by Nemec
to Bookmarks section.
15/03/2021: Added OSINT
Treasure Trove to Training
section.
08/03/2021: Added Dark Web
Investigating video by Sinwindie
to Training section.
03/03/2021: Added Cloud Enum
Tool & Fake SMS to Tools and
Started Training/Learning Section
for personal development
opportunities.
23/02/2021: Added CyberSecStu's
OSINT doc for missing persons
investigations.
02/02/2021: Added OSINT Search
Operators to Tools.
20/01/2021: Added Holehe to
Tools.
10/12/2020: Added EXIF Extractor
to Tools section.
09/12/2020: Added ProtOSINT
and NCC Group's Cloud IP Range
tools to the Tools section.
20/11/2020: Added Judy Records
to Public Records.
17/11/2020: Added Usersearch's
new paid membership site to
Usernames
05/11/2020: OSINT Framework
added to Collated Search
Resources.
02/10/2020: GHunt added to
tools and Profilr marked as dead
link.
01/10/2020: Telegram Stats &
Search added.
27/09/2020: Added Social Scan
and H8Mail to Tools section.
23/09/2020: Added Tafferugli to
Tools section.
09/09/2020: Added some DNS
recon tools to the Tools section.
28/08/2020: Added Reditr, a
Reddit viewer that organises
content similarly to TweetDeck.
20/08/2020: Added Epieos
Google Account lookup for email
addresses, based on Sector035's
article on Google Hangouts and
Google IDs
18/08/2020: Added Telegram
Search Operators for User and
Group referral and other search
resources for Telegram
17/08/2020: Added Recon Spider
to Tools section
08/08/2020: Added Tools,
Bookmarks & Collated Search
Resources sections
07/08/2020: Created sheet,
added Kik User Query to Other
Social