Welcome to My Ultimate OSINT Arsenal, a carefully curated collection of OSINT tools, resources, websites, and training materials for Open-Source Intelligence. Whether you're an investigator, security researcher, journalist, or OSINT enthusiast, this repository serves as a comprehensive resource hub to power your investigative capabilities.
- Introduction
- OSINT Categories
- Sock Puppets
- Search Engines and Indexing Tools
- Image Search & OSINT
- Social Media OSINT
- Geospatial Intelligence (GEOINT)
- Username Lookup & Social Media Availability
- Email, Domain, and Network Analysis
- Breached Data and Password Recovery Tools
- People Search & Background Check Tools
- Website OSINT Tools
- Automation and Toolkits
- Business OSINT
- Wireless OSINT
- Building an OSINT Lab
- Working with OSINT Tools
- Other Specialized Resources
- Learning and Certification Resources
- Getting Started
- Contributing
- License
- Disclaimer
Open-Source Intelligence (OSINT) is a discipline of gathering publicly available data from online sources to uncover valuable insights. This repository is your ultimate guide to tools, training, and techniques that will help you master OSINT.
Sock Puppets are used to concealing real identity to be more secure.
- Fake Name Generator: Generate Fake Person Details
- ThisPersonDoesNotExist: Generate Fake AI Image
- Privacy.com: Generate Fake Credit Card Details
- Google Advanced Search: Search with Precision
- Google Advanced Search Operators: Google Search Operators Guide
- Wayback Machine: Internet Archive
- Yandex: Yandex Search
- DuckDuckGo: DuckDuckGo Search
- Baidu: Baidu Search Engine
- Google Image Search: Search Google Using Image
- TinEye: TinEye
- Yandex: Yandex Search
These tools enable users to gather in-depth data from various social media platforms like Twitter, Instagram, and Snapchat. They provide advanced search capabilities, analytics, and data extraction features to help in social media OSINT investigations. Use them carefully and ethically.
- Twitter Advanced Search: Find Tweets with Advanced Filters
- Social Bearing: Twitter Profile Analysis
- Twitonomy: Detailed Twitter User Analytics
- Mentionmapp: Twitter Network Mapping
- Tweetbeaver: Extract Data from Tweets
- Spoonbill.io: Twitter Data Extraction
- Tinfoleak: Deep Twitter Insights
- TweetDeck: Twitter Account Management Tool
- Code of a Ninja - Instagram User ID Finder: Find Instagram User IDs
- InstaDP: Download Instagram Profile Picture
- ImgInn: Instagram Profile and Post Viewer
- Snapchat Maps: View Snapchat Locations
- Sleeping Time: Analyze User Activity and Sleep Patterns
- Wopita: Advanced Instagram and Facebook Search
- Sowdust Github - Facebook Search: Explore Facebook Profiles
- IntelligenceX - Facebook Search: Investigate Facebook Information
- Google Earth: Google Earth Pro
- OpenStreetMap: OSM
- EXIF Data Tools: Various (e.g., ExifTool)
These tools are excellent for identifying usernames, their availability, and associated accounts on various platforms. Some, like Sherlock, require installation and are script-based, while others are web-based for instant results.
- NameChk: Check Username Availability
- WhatsMyName: Search Usernames Across Platforms
- NameCheckup: Find Social Media & Domain Availability
- KnowEm: Social Media Username Availability Check
- Usersearch.org: OSINT Username Investigations
- PeekYou: Discover Social Media Profiles
- Sherlock: Find Usernames Across Social Media
- Social Bearing: Twitter Analysis & OSINT
- Twitonomy: Twitter User Insights
- Maltego: Graphical Link Analysis Tool for OSINT
- MXToolbox: MXToolbox Utilities
- Hunter.io: Email Discovery
- Shodan: Search Devices
- Phonebook.cz: Phonebook Search
- VoilaNorbert: Find Emails
- Email Hippo: Verify Email Addresses
- Email Checker: Email Validation
- Clearbit Connect: Email Insights
These tools provide resources for identifying compromised credentials and evaluating risks associated with breaches. Be mindful of legal and ethical considerations when using such tools.
- Dehashed: Search for breached credentials
- WeLeakInfo: Comprehensive database for data breaches
- LeakCheck: Verify and recover leaked data
- SnusBase: Explore breached databases
- Scylla.sh: Open-source intelligence for breaches
- HaveIBeenPwned: Check if your data has been exposed
- GhostProject: Breached credentials and passwords search
- BreachDirectory: Find out if your accounts are compromised
- IntelX: Search intelligence platform for breached data
- Leakix: Search publicly accessible vulnerabilities
- Vigilante.pw: Monitor database leaks
- Pwndb: Search database breaches via onion services (requires Tor)
- Passwordrecovery.io: Secure password breach checks
These tools enable comprehensive searches for personal information, background checks, and contact tracing. Be sure to use them responsibly and comply with relevant laws and privacy guidelines.
- Pipl: Pipl Search
- WhitePages: Find People, Phone Numbers, and Addresses
- TruePeopleSearch: Free People Search Tool
- FastPeopleSearch: Locate People Quickly
- FastBackgroundCheck: Background Check Services
- WebMii: Search People Online
- PeekYou: Find Public Social Media Profiles
- 411: Directory Assistance for People Search
- Spokeo: People Search, Reverse Phone & Email Lookup
- That's Them: Find People, Numbers, and Emails
- Voter Records: Public Voter Registration Data
- TrueCaller: Identify Unknown Callers
- CallerID Test: Verify Caller ID
- Infobel: Global Directory Assistance
These tools are invaluable for conducting research on websites, domains, and network infrastructures. They provide data on technology stacks, DNS configurations, subdomains, historical data, and security analysis, which are essential for OSINT investigations in cybersecurity.
- BuiltWith: Discover Technologies on Websites
- Domain Dossier: Advanced Domain Research
- DNSlytics: Reverse IP Lookup and DNS Analytics
- SpyOnWeb: Investigate Website Data & Connections
- VirusTotal: Analyze Files, URLs, and Domains for Malware
- Visual Ping: Monitor Website Changes
- Back Link Watch: Monitor Backlinks to Websites
- View DNS: DNS Lookup and Reverse Lookup
- Pentest-Tools Subdomain Finder: Find Subdomains of a Domain
- Spyse: Cybersecurity Intelligence Platform
- crt.sh: Certificate Transparency Logs Search
- Shodan: Explore the Internet of Things (IoT)
- Wayback Machine: Access Archived Websites
- Censys: Global Internet Data Search
- SecurityTrails: Comprehensive DNS and IP Research
- IPinfo: IP Address Geolocation & Information
- Whois Lookup: Domain Registration Information
- Hackertarget: DNS and Reverse DNS Lookup
- Netcraft: Website Fingerprinting and Site Data
- Wappalyzer: Technologies Used on Websites
- Maltego: Maltego OSINT
- OSINT Framework: OSINT Framework Tools
- Recon-ng: Recon-ng GitHub
These platforms provide comprehensive databases for investigating companies, directors, financials, and more. Open Corporates is a massive collection of company records, while AI HIT offers detailed information and business analytics.
- Open Corporates: Global Corporate Data
- AI HIT: Business Information and Analytics
WiGLE allows you to search for wireless networks, offering a unique look at geolocated WiFi and cell tower data. It’s particularly useful for mapping out wireless infrastructures in various areas.
Building an OSINT lab requires proper tools for virtualization. Both VMWare Workstation Player and VirtualBox are popular for setting up isolated environments to run OSINT tools safely. TraceLabs provides a specialized OSINT virtual machine, which can be easily deployed for investigation purposes.
- VMWare Workstation Player: Free Virtual Machine Software
- VirtualBox: Open Source Virtualization
- TraceLabs OSINT VM: OSINT Virtual Machine for Investigations
- TraceLabs OSINT VM Installation Guide: Installation Guide for OSINT VM
The tools listed here are essential for gathering information during OSINT investigations. From discovering subdomains to enumerating assets and probing live domains, each tool is designed for a specific purpose. Amass and Subfinder are crucial for deep domain reconnaissance, while GoWitness and httprobe help visualize and test the targets found during reconnaissance.
- breach-parse: Parse Breach Data for OSINT
- Subfinder: Find Subdomains with OSINT
- Assetfinder: Discover Assets Linked to Domains
- httprobe: Probe for Live Domains
- Amass: Comprehensive Subdomain Enumeration
- GoWitness: Take Website Screenshots
- Censys: Censys Search
- VirusTotal: Analyze Files & URLs
- OSINT Fundamentals in One Video: TCM Security - OSINT
- Clone this repository:
git clone https://github.com/rashidwassan/My-Ultimate-OSINT-Arsenal.git
- Explore tools and resources under each category.
- Add your tools or resources by contributing to this repository!
We welcome contributions to expand this repository! Here's how you can contribute:
- Fork the repository.
- Create a new branch:
git checkout -b feature/new-tool. - Add your contribution.
- Submit a pull request for review.
This repository is licensed under the MIT License. See the LICENSE file for more information.
All resources provided in this repository are for educational and ethical use only. Misuse of these tools for illegal or unethical purposes is strictly prohibited.
Happy OSINTing! 🚀